Alpine/wpa_supplicant: high 8.1
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete E
Action: Upgrade wpa_supplicant to 2.7-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 2.7-r2 | - |
Fixed versions
| 2.7-r2 |
Sources
- osv: ALPINE-CVE-2019-9497#Alpine:v3.14/wpa_supplicant
- https://security.alpinelinux.org/vuln/CVE-2019-9497
published · modified · JSON