CVE-2019-9494
Published: Apr 17, 2019
Modified: Aug 4, 2024
Description
The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
| Vendor | Product | Versions |
|---|---|---|
Wi-Fi Alliance | hostapd with SAE support | affected 2.7 - <= 2.7 |
Wi-Fi Alliance | wpa_supplicant with SAE support | affected 2.7 - <= 2.7 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now