The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-01-17T00:00:00

Updated: 2024-08-03T03:36:20.403Z

Reserved: 2022-01-17T00:00:00

Link: CVE-2022-23304

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-01-17T02:15:06.813

Modified: 2023-11-07T03:44:08.177

Link: CVE-2022-23304

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-01-17T00:00:00Z

Links: CVE-2022-23304 - Bugzilla