Advisories · Technology
Wi-Fi Alliance wpa_supplicant with SAE support.
Every CVE that names Wi-Fi Alliance wpa_supplicant with SAE support among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-346
-
The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-346
-
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-301
-
An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps
- Wi-Fi Alliance hostapd with SAE support
- Wi-Fi Alliance wpa_supplicant with SAE support
- CWE-642
-
The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks
- Wi-Fi Alliance hostapd with SAE support
- Wi-Fi Alliance wpa_supplicant with SAE support
- CWE-208
- CWE-524