WS
Product
Wpa Supplicant
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 19Low 1
Watch
Add Wpa Supplicant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23304 | 9.8 | Jan 17 | The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns Affected: before 2.10 |
| CVE-2022-23303 | 9.8 | Jan 17 | The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns Affected: before 2.10 |
| CVE-2019-9499 | 8.1 | Apr 17 | The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and… Affected: through 2.4; 2.5 through 2.7 |
| CVE-2019-9498 | 8.1 | Apr 17 | The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element… Affected: through 2.4; 2.5 through 2.7 |
| CVE-2019-9497 | 8.1 | Apr 17 | The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit Affected: through 2.4; 2.5 through 2.7 |
| CVE-2017-13082 | 8.1 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT)… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2024-5290 | 7.8 | Aug 7 | An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the… Affected: All versions, or not specified |
| CVE-2021-27803 | 7.5 | Feb 26 | A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests Affected: 1.0 before 2.10 |
| CVE-2019-9496 | 7.5 | Apr 17 | An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP… Affected: through 2.7 |
| CVE-2016-4476 | 7.5 | May 9 | hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of… Affected: 0.6.7 through 2.5 |
| CVE-2017-13086 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13084 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13077 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2023-52160 | 6.5 | Feb 22 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass Affected: through 2.10 |
| CVE-2019-16275 | 6.5 | Sep 12 | hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled Affected: through 2.9 |
| CVE-2018-14526 | 6.5 | Aug 8 | An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6 Affected: 2.0 through 2.6 |
| CVE-2019-11555 | 5.9 | Apr 26 | The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where… Affected: before 2.8 |
| CVE-2019-9494 | 5.9 | Apr 17 | The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns Affected: through 2.7 |
| CVE-2015-5316 | 5.9 | Feb 21 | The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote… Affected: 2.0 before 2.6 |
| CVE-2015-5315 | 5.9 | Feb 21 | The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when… Affected: 2.0 before 2.6 |
| CVE-2015-5314 | 5.9 | Feb 21 | The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used… Affected: 2.0 before 2.6 |
| CVE-2015-0210 | 5.9 | Aug 28 | wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack Affected: 2.0-16 |
| CVE-2021-30004 | 5.3 | Apr 2 | In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c Affected: 2.9 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2019-9495 | 3.7 | Apr 17 | The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns Affected: through 2.7 |
| CVE-2015-8041 | – | Nov 9 | Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or… Affected: through 2.4 |
| CVE-2015-4146 | – | Jun 15 | The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be… Affected: 1.0; 1.1; 2.0; 2.1; 2.2; 2.3; +1 more |
| CVE-2015-4145 | – | Jun 15 | The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to… Affected: 1.0; 1.1; 2.0; 2.1; 2.2; 2.3; +1 more |
| CVE-2015-4144 | – | Jun 15 | The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which… Affected: 1.0; 1.1; 2.0; 2.1; 2.2; 2.3; +1 more |
| CVE-2015-4143 | – | Jun 15 | The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a… Affected: 1.0; 1.1; 2.0; 2.1; 2.2; 2.3; +1 more |
| CVE-2015-4142 | – | Jun 15 | Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote… Affected: 0.7.0; 0.7.1; 0.7.2; 0.7.3; 1.0; 1.1; +5 more |
| CVE-2015-4141 | – | Jun 15 | The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of… Affected: 0.7.0; 0.7.1; 0.7.2; 0.7.3; 1.0; 1.1; +5 more |
| CVE-2015-1863 | – | Apr 28 | Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via… Affected: 1.0; 1.1; 2.0; 2.1; 2.2; 2.3; +1 more |
| CVE-2014-3686 | – | Oct 16 | wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute… Affected: 0.72; 1.0; 1.1; 2.0; 2.1; 2.2 |
Showing 39