Alpine/wpa_supplicant: medium 6.5
An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker w
Action: Upgrade wpa_supplicant to 2.6-r14 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0 | 2.6-r14 | - |
Fixed versions
| 2.6-r14 |
Sources
- osv: ALPINE-CVE-2018-14526#Alpine:v3.11/wpa_supplicant
- https://security.alpinelinux.org/vuln/CVE-2018-14526
published · modified · JSON