Description
An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 13 | | >=0 <2:2.7+git20190128+0c1e29f-4 | 2:2.7+git20190128+0c1e29f-4 |
 alpine v3.17 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
alpine v3.20 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
alpine v3.22 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
alpine v3.7 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || >=0 <2.6-r5 | 2.6-r5 |
alpine v3.10 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
alpine v3.13 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
alpine v3.16 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
alpine v3.6 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || >=0 <2.6-r3 | 2.6-r3 |
alpine v3.14 | | =0.6.10-r0 || =0.6.10-r1 || =0.6.10-r2 || =0.6.9-r0 || =0.6.9-r1 || =0.7.3-r0 || =0.7.3-r1 || =0.7.3-r2 || =1.0-r0 || =1.0-r1 || =1.0-r2 || =1.1-r0 || =2.0-r0 || =2.0-r1 || =2.1-r0 || =2.2-r0 || =2.3-r0 || =2.4-r0 || =2.4-r1 || =2.5-r0 || =2.5-r1 || =2.5-r2 || =2.5-r3 || =2.6-r0 || =2.6-r1 || =2.6-r2 || =2.6-r3 || =2.6-r4 || =2.6-r5 || =2.7-r0 || >=0 <2.8-r0 | 2.8-r0 |
