CVE-2019-9494

Advisory lineage Upstream: 0 Downstream: 11
Modified
Published: 17 Apr 2019, 13:31
Last modified:04 Aug 2024, 21:54

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
5.9 MEDIUM
v3.1 (nvd)
EPSS Score
1.52% LOW
2% probability +0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Apr 2019, 13:31
Published
Vulnerability first disclosed
04 Aug 2024, 21:54
Last Modified
Vulnerability information updated

Description

The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 1.52%• Percentile: 82%

Techniques & Countermeasures

  • CWE-203•Observable Discrepancy

    The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

  • CWE-208•Observable Timing Discrepancy

    Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

  • CWE-524•Use of Cache Containing Sensitive Information

    The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

Affected Systems

  • fedoraproject•fedora

    28 | 29 | 30

  • freebsd•freebsd

    11.2 | 11.2:p2 | 11.2:p3 | 11.2:p4 | 11.2:p5 | 11.2:p6 | 11.2:p7 | 11.2:p8 | 11.2:p9 | 11.2:rc3 | 12.0 | 12.0:p1 | 12.0:p2 | 12.0:p3

  • opensuse•backports_sle

    15.0 | 15.0:sp1

  • opensuse•leap

    15.1

  • synology•radius_server

    3.0

  • synology•router_manager

    < 1.2.3-8087

  • w1.fi•hostapd

    ≤ 2.7

  • w1.fi•wpa_supplicant

    ≤ 2.7

  • wi-fi alliance•hostapd with sae support

    2.7

  • wi-fi alliance•wpa_supplicant with sae support

    2.7

References (9)