Summary
It was discovered that wpa_supplicant and hostapd incorrectly handled
unexpected fragments when using EAP-pwd. A remote attacker could possibly
use this issue to cause a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | wpa | 2.4-0ubuntu6.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | wpa | 2:2.6-15ubuntu2.3 |
Vulnerabilities 1
-
Unscored —
The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validat…
References
-
report
https://ubuntu.com/security/CVE-2019-11555