HO
Product
hostapd
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 17Low 2
Watch
Add hostapd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-13086 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13084 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13077 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2022-37660 | 6.5 | Feb 11 | In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association Affected: through 2.10 |
| CVE-2019-5062 | 6.5 | Dec 12 | An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions Affected: 2.6 |
| CVE-2019-5061 | 6.5 | Dec 12 | An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required… Affected: 2.6 |
| CVE-2019-16275 | 6.5 | Sep 12 | hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled Affected: through 2.9 |
| CVE-2019-13377 | 5.9 | Aug 15 | The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache… Affected: 2.0 through 2.8 |
| CVE-2019-11555 | 5.9 | Apr 26 | The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where… Affected: before 2.8 |
| CVE-2019-9494 | 5.9 | Apr 17 | The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns Affected: through 2.7 |
| CVE-2021-30004 | 5.3 | Apr 2 | In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c Affected: 2.9 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.8; 0.3.7; 0.3.9; +25 more |
Showing 17