PT-2019-17446 · Hostap+2 · Hostapd+2

Mark Leonard + 1 · Publicado 2018-12-18 · Atualizado 2022-06-17 · CVE-2019-5062

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions hostapd version 2.6

Description An issue exists in the 802.11w security state handling for connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resulting in a denial of service.

Recommendations For hostapd version 2.6, consider disabling the 802.11w security feature as a temporary workaround until a patch is available. Restrict access to the network to minimize the risk of exploitation. Avoid using 802.11w sessions in the affected hostapd version until the issue is resolved.

Correção

DoS

Origin Validation Error

Enumeração de Fraquezas

CWE-440

CWE-346

Identificadores relacionados

ALT-PU-2018-2871

CVE-2019-5062

Produtos afetados

Alt Linux

Debian

Hostapd

Referências · 9

• https://security-tracker.debian.org/tracker/CVE-2019-5062 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-5062 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-5062 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-5062 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5062 · Nota de Segurança
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0850 · Nota
• https://t.me/cvenotify/31777 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2019-5062 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5062 · Aviso do Fabricante