Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 8: MGASA-2022-0025 Moderate: wpa_supplicant Side Channel Attack

mageia
Calendar Grey January 18, 2022
Dist Mageia Esm H88
MGASA-2022-0026 covers a vulnerability found in NetworkManager, crucial for safeguarding Mageia 8 users against potential threats.
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns

Summary

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

References

- https://bugs.mageia.org/show_bug.cgi?id=29899

- https://w1.fi/security/2022-1/sae-eap-pwd-side-channel-attack-update-2.txt

- https://nvd.nist.gov/vuln/detail/CVE-2022-23303

- https://www.cve.org/CVERecord?id=CVE-2022-23303

Topics%20covered

Topics Covered

security advisory moderate wpa_supplicant hostapd mageia side channel attack

Resolution

SRPMS

- 8/core/wpa_supplicant-2.9-8.3.mga8

Publication date: 18 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0025.html
Type: security
CVE: CVE-2022-23303

Topics%20covered

Topics Covered

security advisory moderate wpa_supplicant hostapd mageia side channel attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here