PT-2019-4181 · Linux+3 · Hostapd+4
Jouni Malinen
·
Publicado
2019-09-12
·
Atualizado
2024-10-29
·
CVE-2019-16275
CVSS v3.1
6.5
Média
| Vetor | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
hostapd versions prior to 2.10
wpa supplicant versions prior to 2.10
Description
The issue is related to a denial of service caused by mishandled source address validation, which should have been prevented by management frame protection. An attacker within the 802.11 communications range can send a crafted 802.11 frame to cause associated stations to be disconnected, requiring a reconnection to the network. This can be achieved by injecting a specially constructed unauthenticated IEEE 802.11 frame to the access point.
Recommendations
For hostapd versions prior to 2.10, update to version 2.10 or later to resolve the issue.
For wpa supplicant versions prior to 2.10, update to version 2.10 or later to resolve the issue.
As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.
Correção
DoS
Origin Validation Error
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Hostapd
Wpa Supplicant