https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:47:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03318 bdu:2020-03318 https://cve.radiocsirt.org/vuln/bdu:2020-03318 https://cve.radiocsirt.org/vuln/bell-cve-2019-13377 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-13377 https://cve.radiocsirt.org/vuln/cnvd-2019-42773 cnvd-2019-42773 https://cve.radiocsirt.org/vuln/cnvd-2019-42773 https://cve.radiocsirt.org/vuln/euvd-2026-55699 EUVD-2026-55699 https://cve.radiocsirt.org/vuln/euvd-2026-55699 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13377 <p>The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.</p> <p>The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-13377 https://cve.radiocsirt.org/vuln/ghsa-m5xx-ghwp-mgmq <p>The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.</p> <p>The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.</p> https://cve.radiocsirt.org/vuln/ghsa-m5xx-ghwp-mgmq https://cve.radiocsirt.org/vuln/gsd-2019-13377 gsd-2019-13377 https://cve.radiocsirt.org/vuln/gsd-2019-13377 https://cve.radiocsirt.org/vuln/oesa-2021-1019 <p><strong>Affected:</strong> openEuler:20.03-LTS: wpa_supplicant, openEuler:20.03-LTS-SP1: wpa_supplicant</p> <p>wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\r\n\r\n Security Fix(es):\r\n\r\n The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.(CVE-2019-13377)\r\n\r\n</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: wpa_supplicant, openEuler:20.03-LTS-SP1: wpa_supplicant</p> <p>wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\r\n\r\n Security Fix(es):\r\n\r\n The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.(CVE-2019-13377)\r\n\r\n</p> https://cve.radiocsirt.org/vuln/oesa-2021-1019 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2053-1 <p>Security update for wpa_supplicant</p> <p>Security update for wpa_supplicant</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:2053-1 https://cve.radiocsirt.org/vuln/suse-su-2020:3380-1 <p>Security update for wpa_supplicant</p> <p>Security update for wpa_supplicant</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3380-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13377 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: wpa</p> <p>The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: wpa</p> <p>The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13377