CVE-2019-13377
Fixed in a distro release EPSS 3%
The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.
Products: w1.fi hostapd, fedoraproject fedora, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | hostapd | 2.8-r1 |
| Alpine 3.10 | wpa_supplicant | 2.8-r2 |
| Alpine 3.9 | hostapd | 2.7-r4 |
| Alpine 3.9 | wpa_supplicant | 2.7-r4 |
| Debian 10 | wpa | 2:2.7+git20190128+0c1e29f-6+deb10u1 |
| Debian 12 | wpa | 2:2.9-1 |
| Debian 13 | wpa | 2:2.9-1 |
| Debian 14 | wpa | 2:2.9-1 |
| SUSE HPE Helion OpenStack 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP5 | wpa_supplicant | 2.9-23.3.1 |
| SUSE Linux Enterprise Server 15-LTSS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | wpa_supplicant | 2.9-23.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | wpa_supplicant | 2.9-4.20.1 |
| SUSE OpenStack Cloud 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud 9 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud Crowbar 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud Crowbar 9 | wpa_supplicant | 2.9-15.22.1 |
| Ubuntu 18.04 LTS | wpa | 2:2.6-15ubuntu2.4 |
| openSUSE Leap 15.1 | wpa_supplicant | 2.9-lp151.5.10.1 |
| openSUSE Leap 15.2 | wpa_supplicant | 2.9-lp152.8.3.1 |
| openSUSE Tumbleweed | wpa_supplicant | 2.9-13.4 |