All packages
hostapd/wpa_supplicant vulnerabilities
3 known CVE vulnerabilities in hostapd/wpa_supplicant, translated and rated.
- CVE-2016-4476High
Versions of hostapd from 0.6.7 to 2.5 and wpa_supplicant from 0.6.7 to 2.5 do not reject and characters in passphrase parameters, allowing remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
- CVE-2022-23304Critical
The EAP-pwd implementations in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks due to cache access patterns. This issue exists because of an incomplete fix for CVE-2019-9495.
- CVE-2022-23303Critical
The SAE protocol implementations in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks due to cache access patterns. This issue exists because of an incomplete fix for CVE-2019-9494.