Summary
It was discovered that wpa_supplicant and hostapd were vulnerable to a side
channel attack against EAP-pwd. A remote attacker could possibly use this
issue to recover certain passwords.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | wpa | 2:2.6-15ubuntu2.4 |
Vulnerabilities 1
-
Unscored —
The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel att…
References
-
report
https://ubuntu.com/security/CVE-2019-13377