Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Wi-Fi Alliance hostapd with EAP-pwd support, wpa_supplicant with EAP-pwd support — FreeBSD-SA-19:03 Clear all filters
TI-2019-06935 CVE-2019-9499 · GHSA-qppx-fffq-j22m

Origin validation error in Wi-Fi Alliance hostapd with EAP-pwd support

Priority MEDIUM 40

The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02215 Published 2019-04-17 No fix listed CWE-346
TI-2019-06934 CVE-2019-9498 · GHSA-vv3p-4cq3-5ppc

The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit

Priority MEDIUM 40

The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02215 Published 2019-04-17 No fix listed CWE-346