Description
The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 alpine v3.9 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || =2.7-r1 || =2.7-r2 || =2.7-r3 || >=0 <2.7-r4 | 2.7-r4 |
alpine v3.9 | | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || =2.7-r2 || =2.7-r3 || >=0 <2.7-r4 | 2.7-r4 |
alpine v3.10 | | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || =2.7-r2 || =2.7-r3 || =2.8-r0 || =2.8-r1 || >=0 <2.8-r2 | 2.8-r2 |
 debian 14 | | | 2:2.9-1 |
alpine v3.10 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || =2.8-r0 || >=0 <2.8-r1 | 2.8-r1 |
debian 12 | | | 2:2.9-1 |
debian 11 | | | 2:2.9-1 |
debian 13 | | | 2:2.9-1 |
