CVE-2019-9495 Information disclosure in hostapd with EAP-pwd support
Attackers can exploit cache side-channels in EAP-PWD implementations to recover weak passwords, requiring local application execution privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-9495?
CVE-2019-9495 is a low-severity vulnerability in Debian Debian Linux, published on 17 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
Which versions are affected by CVE-2019-9495?
It affects 9 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Freebsd Freebsd, Opensuse Backports Sle, Opensuse Leap, Synology Radius Server and 3 more.
How do I fix CVE-2019-9495?
Upgrade to a fixed version.
Is CVE-2019-9495 being exploited?
There is no known exploitation of CVE-2019-9495 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2019-9495, DEBIAN-CVE-2019-9495, GHSA-p694-q9qw-q238, UBUNTU-CVE-2019-9495.