PT-2019-4181 · Linux+3 · Hostapd+4
Jouni Malinen
·
Published
2019-09-12
·
Updated
2024-10-29
·
CVE-2019-16275
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
hostapd versions prior to 2.10
wpa supplicant versions prior to 2.10
Description
The issue is related to a denial of service caused by mishandled source address validation, which should have been prevented by management frame protection. An attacker within the 802.11 communications range can send a crafted 802.11 frame to cause associated stations to be disconnected, requiring a reconnection to the network. This can be achieved by injecting a specially constructed unauthenticated IEEE 802.11 frame to the access point.
Recommendations
For hostapd versions prior to 2.10, update to version 2.10 or later to resolve the issue.
For wpa supplicant versions prior to 2.10, update to version 2.10 or later to resolve the issue.
As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.
Fix
DoS
Origin Validation Error
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Suse
Ubuntu
Hostapd
Wpa Supplicant