Critical Side Channel Vulnerability in Hostapd - CVE-2022-23303
Summary
ALPINE-CVE-2022-23303: The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. Affects hostapd versions < 2.9-r4. Fixed in 2.9-r4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Hostapd is a user space daemon for access point and authentication servers. It enables the creation of wireless access points and provides authentication services for clients. The package is widely used in various Linux distributions, including Alpine Linux. This vulnerability affects multiple versions of Hostapd, making it critical for users to address it promptly.
Vulnerability Detail
The vulnerability arises from the implementation of Simultaneous Authentication of Equals (SAE) in Hostapd versions prior to 2.10. It is susceptible to side channel attacks due to cache access patterns, which could allow an attacker to infer sensitive information. This issue is particularly concerning as it stems from an incomplete fix for CVE-2019-9494, indicating a potential risk for data breaches and unauthorized access.
How To Fix
Minimum fixed version
2.9-r4
This is the first release that contains the fix.
sudo apk add --upgrade hostapdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected systems and monitor for unusual activity while preparing to update to the patched version. Additionally, consider disabling SAE if it is not essential for your network security.
Conclusion
The vulnerability CVE-2022-23303 in Hostapd poses a significant risk due to its potential for side channel attacks. Users are strongly advised to update to the patched versions to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for hostapd →
FAQ
CVE-2022-23303 is a vulnerability in Hostapd that allows side channel attacks due to cache access patterns in the SAE implementation.
The vulnerability has a CVSS score of 9.8, indicating it is critical and should be addressed immediately.
Hostapd versions prior to 2.10 are affected, with specific fixed versions depending on the Alpine Linux version.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file. Check your application at Vulert Scanner.
If immediate updates are not possible, limit access to the affected systems and monitor for any suspicious activities.
References
Related vulnerabilities
Recent vulnerabilities recorded for hostapd.
