A vulnerability was found in hostapd and wpa_supplicant up to 2.9. It has been rated as problematic. Affected by this issue is an unknown function of the component Disconnection Handler. The manipulation as part of a Source Address leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is availability. CVE summarizes:

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.

The weakness was disclosed 09/12/2019 (oss-sec). The advisory is available at openwall.com. This vulnerability is handled as CVE-2019-16275 since 09/12/2019. The exploitation is known to be easy. The attack needs to approached within the local network. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available.

Upgrading to version 2.10 eliminates this vulnerability.

Productinfo

Name

• hostapd
• wpa_supplicant

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion