Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-14526

Fixed in a distro release EPSS 1%

An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.

Published 2018-08-08 · CVE record · OSV

Products: canonical ubuntu_linux, debian_linux, w1.fi wpa_supplicant

Distro releases

ReleasePackageFixed in
Alpine 3.10wpa_supplicant2.6-r14
Alpine 3.11wpa_supplicant2.6-r14
Alpine 3.12wpa_supplicant2.6-r14
Alpine 3.13wpa_supplicant2.6-r14
Alpine 3.14wpa_supplicant2.6-r14
Alpine 3.15wpa_supplicant2.6-r14
Alpine 3.16wpa_supplicant2.6-r14
Alpine 3.17wpa_supplicant2.6-r14
Alpine 3.18wpa_supplicant2.6-r14
Alpine 3.19wpa_supplicant2.6-r14
Alpine 3.20wpa_supplicant2.6-r14
Alpine 3.21wpa_supplicant2.6-r14
Alpine 3.22wpa_supplicant2.6-r14
Alpine 3.23wpa_supplicant2.6-r14
Alpine 3.24wpa_supplicant2.6-r14
Alpine 3.5wpa_supplicant2.6-r3
Alpine 3.6wpa_supplicant2.6-r5
Alpine 3.7wpa_supplicant2.6-r9
Alpine 3.8wpa_supplicant2.6-r14
Alpine 3.9wpa_supplicant2.6-r14
Amazon Linux 2wpa_supplicant1:2.6-12.amzn2
Arch Linuxwpa_supplicant1:2.6-12
Debian 12wpa2:2.6-18
Debian 13wpa2:2.6-18
Debian 14wpa2:2.6-18
Debian 8wpa2.3-1+deb8u6
Red Hat Enterprise Linux 7wpa_supplicant1:2.6-12.el7
Red Hat Enterprise Linux 7wpa_supplicant-debuginfo1:2.6-12.el7
SUSE Enterprise Storage 4wpa_supplicant2.6-15.10.1
SUSE HPE Helion OpenStack 8wpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Desktop 12 SP3wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Desktop 12 SP4wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSwpa_supplicant2.9-4.20.1
SUSE Linux Enterprise High Performance Computing 15-LTSSwpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Module for Basesystem 15wpa_supplicant2.6-4.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP1wpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Module for Basesystem 15 SP2wpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Server 12 SP1-LTSSwpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server 12 SP2-BCLwpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Server 12 SP2-BCLwpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server 12 SP2-LTSSwpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server 12 SP3wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server 12 SP3-BCLwpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Server 12 SP3-LTSSwpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Server 12 SP4wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server 12 SP4-LTSSwpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Server 12 SP5wpa_supplicant2.9-23.3.1
SUSE Linux Enterprise Server 12-LTSSwpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server 15-LTSSwpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3wpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4wpa_supplicant2.6-15.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4wpa_supplicant2.9-15.22.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5wpa_supplicant2.9-23.3.1
SUSE Linux Enterprise Server for SAP Applications 15wpa_supplicant2.9-4.20.1
SUSE OpenStack Cloud 7wpa_supplicant2.6-15.10.1
SUSE OpenStack Cloud 8wpa_supplicant2.9-15.22.1
SUSE OpenStack Cloud 9wpa_supplicant2.9-15.22.1
SUSE OpenStack Cloud Crowbar 8wpa_supplicant2.9-15.22.1
SUSE OpenStack Cloud Crowbar 9wpa_supplicant2.9-15.22.1
Ubuntu 14.04 LTSwpa2.1-0ubuntu1.6
Ubuntu 16.04 LTSwpa2.4-0ubuntu6.3
Ubuntu 18.04 LTSwpa2:2.6-15ubuntu2.1
openSUSE Leap 15.1wpa_supplicant2.9-lp151.5.10.1
openSUSE Leap 15.2wpa_supplicant2.9-lp152.8.3.1
openSUSE Tumbleweedhostapd2.9-6.2
openSUSE Tumbleweedwpa_supplicant2.9-13.4