Denial of Service Vulnerability in Hostapd and Wpa_Supplicant Packages
Summary
ALPINE-CVE-2019-11555: The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. Affects hostapd versions < 2.8-r0. Fixed in 2.8-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Hostapd and Wpa_Supplicant are essential components in the Linux ecosystem, providing support for wireless networking. Hostapd acts as an access point and authentication server, while Wpa_Supplicant is responsible for managing wireless connections and authentication. Both packages are widely used in various distributions, including Alpine Linux, to facilitate secure wireless communications. However, they are vulnerable to a specific issue that can lead to denial of service, affecting the stability of systems relying on these packages.
Vulnerability Detail
The vulnerability arises from the EAP-pwd implementation in both Hostapd and Wpa_Supplicant prior to version 2.8. It fails to properly validate the fragmentation reassembly state, which can lead to a NULL pointer dereference when an unexpected fragment is received. This oversight can cause the process to terminate unexpectedly, resulting in a denial of service. The affected files are eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c, and the vulnerability is identified as CVE-2019-11555.
How To Fix
Minimum fixed version
2.8-r0
This is the first release that contains the fix.
sudo apk add --upgrade hostapdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider disabling the EAP-pwd feature in your configuration to mitigate the risk until the packages can be updated. This can be done by modifying the configuration files to exclude EAP-pwd settings.
Conclusion
The vulnerability identified as CVE-2019-11555 in Hostapd and Wpa_Supplicant poses a significant risk of denial of service due to improper handling of fragmentation. It is crucial to update to the patched versions to ensure the stability and security of your wireless networking services.
See every vulnerability recorded for hostapd →
FAQ
CVE-2019-11555 is a vulnerability in Hostapd and Wpa_Supplicant that can lead to denial of service due to improper validation of fragmentation reassembly state.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can cause the Hostapd and Wpa_Supplicant processes to terminate unexpectedly, leading to service disruptions in wireless networking.
As a temporary measure, disable the EAP-pwd feature in your configuration to reduce the risk of exploitation until you can apply the updates.
The CVSS score of this vulnerability is 5.9, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for hostapd.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
