ALPINE-CVE-2019-9497

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2019-9497
Published: 17 Apr 2019, 14:29
Last modified:03 Dec 2025, 22:45

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
8.1 HIGH
3.0 (osv_alpine)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Apr 2019, 14:29
Published
Vulnerability first disclosed
03 Dec 2025, 22:45
Last Modified
Vulnerability information updated

Description

The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.

CVSS Metrics

  • v3.0•HIGH•Score: 8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • alpine•wpa_supplicant

    < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2 | < 2.7-r2

References (1)