Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-23303

Опубликовано: 17 янв. 2022
Источник: nvd
CVSS3: 9.8
CVSS2: 6.8
EPSS Низкий

Описание

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*
Версия до 2.10 (исключая)
cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*
Версия до 2.10 (исключая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00301
Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-203

Связанные уязвимости

ubuntu логотип

CVE-2022-23303

CVSS3: 9.8
ubuntu
около 4 лет назад

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

redhat логотип

CVE-2022-23303

CVSS3: 9.8
redhat
около 4 лет назад

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

msrc логотип

CVE-2022-23303

CVSS3: 9.8
msrc
около 4 лет назад

Описание отсутствует

debian логотип

CVE-2022-23303

CVSS3: 9.8
debian
около 4 лет назад

The implementations of SAE in hostapd before 2.10 and wpa_supplicant b ...

github логотип

GHSA-8v55-rm6p-87p5

CVSS3: 9.8
github
почти 4 года назад

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

EPSS

Процентиль: 53%
0.00301
Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-203