Multiple vulnerabilities have been discovered in wpa_supplicant and hostapd, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/hostapd | * | < 2.10 | >= 2.10 |
| net-wireless/wpa_supplicant | * | < 2.10 | >= 2.10 |
wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). hostapd is a user space daemon for access point and authentication servers.
Multiple vulnerabilities have been discovered in hostapd and wpa_supplicant. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-2.10"
All hostapd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/hostapd-2.10"
A vulnerability in hostapd and wpa_supplicant could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/hostapd | * | < 2.8 | >= 2.8 |
| net-wireless/wpa_supplicant | * | < 2.8 | >= 2.8 |
wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN).
hostapd is a user space daemon for access point and authentication servers.
A vulnerability was discovered in hostapd’s and wpa_supplicant’s eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c files.
An attacker could cause a possible Denial of Service condition.
There is no known workaround at this time.
All hostapd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/hostapd-2.8"
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-2.8"
A flaw was discovered in the 4-way handshake in hostapd and wpa_supplicant that allows attackers to conduct a Man in the Middle attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/hostapd | * | < 2.6-r1 | >= 2.6-r1 |
| net-wireless/wpa_supplicant | * | < 2.6-r3 | >= 2.6-r3 |
wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). hostapd is a user space daemon for access point and authentication servers.
WiFi Protected Access (WPA and WPA2) and it’s associated technologies are all vulnerable to the KRACK attacks. Please review the referenced CVE identifiers for details.
An attacker can carry out the KRACK attacks on a wireless network in order to gain access to network clients. Once achieved, the attacker can potentially harvest confidential information (e.g. HTTP/HTTPS), inject malware, or perform a myriad of other attacks.
There is no known workaround at this time.
All hostapd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/hostapd-2.6-r1"
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-2.6-r3"
Multiple vulnerabilities have been found in hostapd and wpa_supplicant, allowing remote attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/hostapd | * | < 2.5 | >= 2.5 |
| net-wireless/wpa_supplicant | * | < 2.5-r1 | >= 2.5-r1 |
wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). hostapd is a user space daemon for access point and authentication servers.
Multiple vulnerabilities exist in both hostapd and wpa_supplicant. Please review the CVE identifiers for more information.
Remote attackers could execute arbitrary code with the privileges of the process or cause Denial of Service.
There is no known workaround at this time.
All hostapd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/hostapd-2.5"
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-2.5-r1"
wpa_supplicant contains a buffer overflow that could lead to a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/wpa_supplicant | * | < 0.2.7 | >= 0.2.7 |
wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN).
wpa_supplicant contains a possible buffer overflow due to the lacking validation of received EAPOL-Key frames.
An attacker could cause the crash of wpa_supplicant using a specially crafted packet.
There is no known workaround at this time.
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-0.2.7"