CVE-2019-9495 — Use of Cache Containing Sensitive Information in Alliance Hostapd With Eap-pwd Support
Severity
3.7LOWNVD
CNA5.9OSV7.5OSV5.9
EPSS
6.2%
top 9.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 17
Latest updateMay 13
Description
The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019…
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4
Affected Packages8 packages
Also affects: Freebsd 11.2, 12.0, Debian Linux 8.0, Fedora 28, 29, 30
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-p694-q9qw-q238: The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns↗2022-05-13
OSV▶
CVE-2019-9495: The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns↗2019-04-17
CVEList▶
The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns↗2019-04-17
📋Vendor Advisories
6Red Hat
▶
Microsoft▶
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an ↗2022-01-11
💬Community
5Bugzilla
▶
Bugzilla
▶