Critical Vulnerability in Hostapd: EAP-pwd Side-Channel Attack Risk
Summary
ALPINE-CVE-2022-23304: The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. Affects hostapd versions < 2.9-r4. Fixed in 2.9-r4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Hostapd is a user space daemon for access point and authentication servers, providing the necessary functionality for wireless networking. It supports various authentication methods and is widely used in Linux-based systems. However, certain versions of Hostapd are vulnerable to side-channel attacks due to flaws in the implementation of EAP-pwd, which could allow attackers to exploit cache access patterns.
Vulnerability Detail
The vulnerability identified as CVE-2022-23304 affects Hostapd versions prior to 2.10. It arises from an incomplete fix for a previous vulnerability (CVE-2019-9495), leading to potential side-channel attacks. Attackers can exploit this vulnerability to gain sensitive information through cache access patterns, posing significant risks to the confidentiality and integrity of the authentication process.
How To Fix
Minimum fixed version
2.9-r4
This is the first release that contains the fix.
sudo apk add --upgrade hostapdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling EAP-pwd if it is not essential for your authentication processes. This can help mitigate the risk until the package is updated.
Conclusion
In summary, CVE-2022-23304 is a critical vulnerability in Hostapd that can lead to serious security risks through side-channel attacks. It is essential to update to the latest patched version to mitigate these risks effectively. Utilize tools like Vulert to monitor and assess your software for vulnerabilities.
See every vulnerability recorded for hostapd →
FAQ
CVE-2022-23304 is a vulnerability in Hostapd that allows for side-channel attacks due to flawed EAP-pwd implementations.
The vulnerability has a CVSS score of 9.8, indicating it is critical and poses a significant risk to affected systems.
Hostapd versions prior to 2.10 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider disabling EAP-pwd as a temporary workaround to reduce the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for hostapd.
