Showing 1 - 2 of 2

CVE-2019-9497

Status Candidate

Overview

The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.

Related Files

FreeBSD Security Advisory - FreeBSD-SA-19:03.wpa: Posted May 15, 2019; Site security.freebsd.org; FreeBSD Security Advisory - Multiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8) implementations.; tags | advisory, vulnerability; systems | freebsd, bsd; advisories | CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497; SHA-256 | d9b765e8617c1094fd1b44bc80bae21176c9518147b96b6da2dc72d5f4fecdd6; Download | Favorite | View

Debian Security Advisory 4430-1: Posted Apr 11, 2019; Authored by Debian | Site debian.org; Debian Linux Security Advisory 4430-1 - Mathy Vanhoef (NYUAD) and Eyal Ronen (Tel Aviv University & KU Leuven) found multiple vulnerabilities in the WPA implementation found in wpa_supplication (station) and hostapd (access point). These vulnerability are also collectively known as "Dragonblood".; tags | advisory, vulnerability; systems | linux, debian; advisories | CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499; SHA-256 | e4cc520a6f88594171e81ee3cde6f6aec1740ca7d34b2fc6ac799e9719e96151; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 256 files
indoushka 106 files
Ubuntu 86 files
Gentoo 32 files
Debian 21 files
LiquidWorm 19 files
Google Security Research 8 files
malvuln 5 files
Emiliano Febbi 4 files
Seth Jenkins 3 files

File Archives

Systems

AIX (430)
Apple (2,117)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,145)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,599)
HPUX (881)
iOS (391)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,636)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,102)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,938)
UNIX (9,470)
UnixWare (188)
Windows (6,784)
Other

CVE-2019-9497

Overview

Related Files

File Archive:

October 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems