PT-2019-2182 · Linux+4 · Wpa Supplicant+5

Published 2019-04-10 · Updated 2022-06-01 · CVE-2019-9498

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions hostapd with SAE support versions prior to 2.4 wpa supplicant with SAE support versions prior to 2.4 hostapd with EAP-pwd support versions prior to 2.7 wpa supplicant with EAP-pwd support versions prior to 2.7

Description The issue is related to the implementations of EAP-PWD in hostapd EAP Server and wpa supplicant. When built against a crypto library missing explicit validation on imported elements, they do not validate the scalar and element values in EAP-pwd-Commit. This allows an attacker to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password.

Recommendations For hostapd with SAE support versions prior to 2.4, update to version 2.4 or later. For wpa supplicant with SAE support versions prior to 2.4, update to version 2.4 or later. For hostapd with EAP-pwd support versions prior to 2.7, update to version 2.7 or later. For wpa supplicant with EAP-pwd support versions prior to 2.7, update to version 2.7 or later.

Fix

Origin Validation Error

Improper Authentication

Weakness Enumeration

CWE-346

CWE-264

CWE-287

Related Identifiers

ALT-PU-2019-2497

ALT-PU-2019-2498

ALT-PU-2019-2554

ALT-PU-2020-3139

ALT-PU-2022-1980

BDU:2019-01948

CVE-2019-9498

DLA-1867-1

DSA-4430-1

OPENSUSE-SU-2020:0222-1

OPENSUSE-SU-2020:2053-1

OPENSUSE-SU-2020:2059-1

OPENSUSE-SU-2020_0222-1

OPENSUSE-SU-2020_2053-1

OPENSUSE-SU-2020_2059-1

SUSE-SU-2020:3380-1

SUSE-SU-2020:3424-1

SUSE-SU-2022:1853-1

USN-3944-1

Affected Products

Alt Linux

Freebsd

Suse

Ubuntu

Hostapd

Wpa Supplicant

References · 87

• https://osv.dev/vulnerability/openSUSE-SU-2020:2053-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-9498 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-9498 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9495 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1853-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3944-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-9498 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE · Vendor Advisory
• https://w1.fi/security/2019-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9499 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-9498 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4430-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:2059-1 · Vendor Advisory