{"action":"Upgrade hostapd to 2.6-r5 or later.","affected":[{"fixed":"2.6-r5","introduced":"0"}],"component":"hostapd","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.8","exploited":false,"fixed_versions":["2.6-r5"],"id":"tcs_01M5NB6C2DS7P26VTVZ6AHTPDB","modified_at":"2026-09-21T06:17:52.460884353Z","published_at":"2019-04-26T22:29:00.357Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-11555","https://security.alpinelinux.org/vuln/CVE-2019-11555"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-11555#Alpine:v3.8/hostapd","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-11555"}],"summary":"The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment"}