Alpine/wpa_supplicant: high 8.1
The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pw
Action: Upgrade wpa_supplicant to 2.7-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5 | 2.7-r2 | - |
Fixed versions
| 2.7-r2 |
Sources
- osv: ALPINE-CVE-2019-9499#Alpine:v3.16/wpa_supplicant
- https://security.alpinelinux.org/vuln/CVE-2019-9499
published · modified · JSON