https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:45:28 +0000 https://cve.radiocsirt.org/vuln/cve-2019-9497 <p><strong>Affected:</strong> Wi-Fi Alliance hostapd with EAP-pwd support, Wi-Fi Alliance wpa_supplicant with EAP-pwd support, Wi-Fi Alliance hostapd with SAE support, Wi-Fi Alliance wpa_supplicant with SAE support</p> <p>The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.</p> <p><strong>Affected:</strong> Wi-Fi Alliance hostapd with EAP-pwd support, Wi-Fi Alliance wpa_supplicant with EAP-pwd support, Wi-Fi Alliance hostapd with SAE support, Wi-Fi Alliance wpa_supplicant with SAE support</p> <p>The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.</p> https://cve.radiocsirt.org/vuln/cve-2019-9497 https://cve.radiocsirt.org/vuln/usn-3944-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: wpa, Ubuntu:16.04:LTS: wpa, Ubuntu:18.04:LTS: wpa</p> <p>It was discovered that wpa_supplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. (CVE-2019-9495)</p> <p>Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly validated received scalar and element values in EAP-pwd-Commit messages. A remote attacker could possibly use this issue to perform a reflection attack and authenticate without the appropriate password. (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499)</p> <p>It was discovered that hostapd incorrectly handled obtaining random numbers. In rare cases where the urandom device isn&#39;t available, it would fall back to using a low-quality PRNG. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: wpa, Ubuntu:16.04:LTS: wpa, Ubuntu:18.04:LTS: wpa</p> <p>It was discovered that wpa_supplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. (CVE-2019-9495)</p> <p>Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly validated received scalar and element values in EAP-pwd-Commit messages. A remote attacker could possibly use this issue to perform a reflection attack and authenticate without the appropriate password. (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499)</p> <p>It was discovered that hostapd incorrectly handled obtaining random numbers. In rare cases where the urandom device isn&#39;t available, it would fall back to using a low-quality PRNG. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)</p> https://cve.radiocsirt.org/vuln/usn-3944-1