Sensitive information sent insecurely In wpa_supplicant
Description
The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.15 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.18 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.20 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.13 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.14 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.22 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.9 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
 debian 11 | >=0 <2:2.7+git20190128+0c1e29f-4 | 2:2.7+git20190128+0c1e29f-4 | |
alpine v3.11 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 | |
alpine v3.17 | =0.5.11-r0 || =0.6.10-r0 || =0.6.9-r0 || =0.6.9-r1 || =0.7.1-r0 || =0.7.1-r1 || =0.7.1-r2 || =0.7.2-r0 || =0.7.2-r1 || =0.7.2-r2 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =1.1-r1 || =2.0-r0 || =2.0-r1 || =2.0-r2 || =2.0-r3 || =2.1-r0 || =2.1-r1 || =2.1-r2 || =2.2-r0 || =2.3-r0 || =2.3-r1 || =2.4-r0 || =2.4-r1 || =2.4-r2 || =2.4-r3 || =2.4-r4 || =2.4-r5 || =2.4-r6 || =2.4-r7 || =2.4-r8 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r10 || =2.6-r11 || =2.6-r12 || =2.6-r13 || =2.6-r14 || =2.6-r15 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.6-r6 || =2.6-r7 || =2.6-r8 || =2.6-r9 || =2.7-r0 || =2.7-r1 || >=0 <2.7-r2 | 2.7-r2 |
1-10 of 19
10
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.