wpa - security update

Fixed packages 1

Vulnerabilities 5

• Unscored —
  CVE-2019-11555

  The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validat…

  wpa wpa wpa_supplicant hostapd Debian Ubuntu Alpine
  Apr 26, 2019
• Unscored —
  CVE-2019-9495

  The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns

  The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applic…

  Wi-Fi Alliance wpa_supplicant with EAP-pwd support hostapd with EAP-pwd support wpa Debian Ubuntu Alpine
  Apr 17, 2019
• Unscored —
  CVE-2019-9497

  The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit

  The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However…

  Wi-Fi Alliance wpa_supplicant with SAE support hostapd with SAE support wpa_supplicant with EAP-pwd support Debian Ubuntu Alpine
  Apr 17, 2019
• Unscored —
  CVE-2019-9498

  The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit

  The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element …

  Wi-Fi Alliance wpa_supplicant with SAE support hostapd with SAE support hostapd with EAP-pwd support Debian Ubuntu Alpine
  Apr 17, 2019
• Unscored —
  CVE-2019-9499

  The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit

  The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session …

  Wi-Fi Alliance hostapd with SAE support wpa_supplicant with SAE support hostapd with EAP-pwd support Debian Ubuntu Alpine
  Apr 17, 2019