CVE-2019-9497 Auth bypass in hostapd with EAP-pwd support
Attackers can bypass EAP-PWD authentication without knowing the password in hostapd and wpa_supplicant, potentially gaining unauthorized network access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-9497?
CVE-2019-9497 is a high-severity authentication bypass vulnerability in Fedoraproject Fedora, published on 17 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
Which versions are affected by CVE-2019-9497?
It affects 3 products.
Products include Fedoraproject Fedora, W1.fi Hostapd, W1.fi Wpa Supplicant.
How do I fix CVE-2019-9497?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-9497 being exploited?
There is no known exploitation of CVE-2019-9497 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALPINE-CVE-2019-9497, DEBIAN-CVE-2019-9497, GHSA-fvg7-p9r8-pcrj, UBUNTU-CVE-2019-9497.