CVE-2019-16275

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range. An attacker in radio range of the access point could inject a specially constructed unauthenticated IEEE 802.11 frame to the access point to cause associated stations to be disconnected and require a reconnection to the network.

Updated wpa_supplicant and hostpad packages fix security vulnerability:

A vulnerability was discovered in wpa_supplicant. When Access Point (AP) mode and Protected Management Frames (PMF) (IEEE 802.11w) are enabled, wpa_supplicant does not perform enough validation on the source address of some received management frames. An attacker within the 802.11 communications range could use this flaw to inject an unauthenticated frame and perform a denial-of-service attack against another device which would be disconnected from the network (CVE-2019-16275).

This update for wpa_supplicant fixes the following issues:

Security issue fixed:

• CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).

Non-security issues fixed:

• Enable SAE support (jsc#SLE-14992).
• Limit P2P_DEVICE name to appropriate ifname size.
• Fix wicked wlan (bsc#1156920)
• Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)
• With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)
• Fix WLAN config on boot with wicked. (bsc#1166933)
• Update to 2.9 release:
  • SAE changes
    • disable use of groups using Brainpool curves
    • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
  • EAP-pwd changes
    • disable use of groups using Brainpool curves
    • allow the set of groups to be configured (eap_pwd_groups)
    • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
  • fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1)
  • fixed a regression in OpenSSL 1.1+ engine loading
  • added validation of RSNE in (Re)Association Response frames
  • fixed DPP bootstrapping URI parser of channel list
  • extended EAP-SIM/AKA fast re-authentication to allow use with FILS
  • extended ca_cert_blob to support PEM format
  • improved robustness of P2P Action frame scheduling
  • added support for EAP-SIM/AKA using anonymous@realm identity
  • fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method
  • added experimental support for EAP-TEAP peer (RFC 7170)
  • added experimental support for EAP-TLS peer with TLS v1.3
  • fixed a regression in WMM parameter configuration for a TDLS peer
  • fixed a regression in operation with drivers that offload 802.1X 4-way handshake
  • fixed an ECDH operation corner case with OpenSSL
  • SAE changes
    • added support for SAE Password Identifier
    • changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes
    • do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms
    • fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP
    • started to prefer FT-SAE over SAE AKM if both are enabled
    • started to prefer FT-SAE over FT-PSK if both are enabled
    • fixed FT-SAE when SAE PMKSA caching is used
    • reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256)
    • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)
  • EAP-pwd changes
    • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)
    • verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)
    • fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)
    • enforce rand,mask generation rules more strictly
    • fix a memory leak in PWE derivation
    • disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27)
    • SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)
  • fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  • Hotspot 2.0 changes
    • do not indicate release number that is higher than the one AP supports
    • added support for release number 3
    • enable PMF automatically for…

This update for wpa_supplicant fixes the following issues:

Security issue fixed:

• CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).

Non-security issues fixed:

• Enable SAE support (jsc#SLE-14992).
• Limit P2P_DEVICE name to appropriate ifname size.
• Fix wicked wlan (bsc#1156920)
• Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)
• With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)
• Fix WLAN config on boot with wicked. (bsc#1166933)
• Update to 2.9 release:
  • SAE changes
    • disable use of groups using Brainpool curves
    • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
  • EAP-pwd changes
    • disable use of groups using Brainpool curves
    • allow the set of groups to be configured (eap_pwd_groups)
    • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
  • fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1)
  • fixed a regression in OpenSSL 1.1+ engine loading
  • added validation of RSNE in (Re)Association Response frames
  • fixed DPP bootstrapping URI parser of channel list
  • extended EAP-SIM/AKA fast re-authentication to allow use with FILS
  • extended ca_cert_blob to support PEM format
  • improved robustness of P2P Action frame scheduling
  • added support for EAP-SIM/AKA using anonymous@realm identity
  • fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method
  • added experimental support for EAP-TEAP peer (RFC 7170)
  • added experimental support for EAP-TLS peer with TLS v1.3
  • fixed a regression in WMM parameter configuration for a TDLS peer
  • fixed a regression in operation with drivers that offload 802.1X 4-way handshake
  • fixed an ECDH operation corner case with OpenSSL
  • SAE changes
    • added support for SAE Password Identifier
    • changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes
    • do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms
    • fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP
    • started to prefer FT-SAE over SAE AKM if both are enabled
    • started to prefer FT-SAE over FT-PSK if both are enabled
    • fixed FT-SAE when SAE PMKSA caching is used
    • reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256)
    • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)
  • EAP-pwd changes
    • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)
    • verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)
    • fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)
    • enforce rand,mask generation rules more strictly
    • fix a memory leak in PWE derivation
    • disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27)
    • SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)
  • fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  • Hotspot 2.0 changes
    • do not indicate release number that is higher than the one AP supports
    • added support for release number 3
    • enable PMF automatically for…

This update for hostapd fixes the following issues:

• CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348)

• CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700)

• CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934)

• added AppArmor profile (source apparmor-usr.sbin.hostapd)

This update for hostapd fixes the following issues:

• CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348)

• CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700)

• CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934)

• added AppArmor profile (source apparmor-usr.sbin.hostapd)

This update was imported from the openSUSE:Leap:15.2:Update update project.

These are all security issues fixed in the hostapd-2.9-6.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the wpa_supplicant-2.9-13.4 package on the GA media of openSUSE Tumbleweed.

This update for wpa_supplicant fixes the following issues:

Security issue fixed:

• CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).

Non-security issues fixed:

• Enable SAE support (jsc#SLE-14992).
• Limit P2P_DEVICE name to appropriate ifname size.
• Fix wicked wlan (bsc#1156920)
• Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)
• With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)
• Fix WLAN config on boot with wicked. (bsc#1166933)
• Update to 2.9 release:
  • SAE changes
    • disable use of groups using Brainpool curves
    • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
  • EAP-pwd changes
    • disable use of groups using Brainpool curves
    • allow the set of groups to be configured (eap_pwd_groups)
    • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
  • fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1)
  • fixed a regression in OpenSSL 1.1+ engine loading
  • added validation of RSNE in (Re)Association Response frames
  • fixed DPP bootstrapping URI parser of channel list
  • extended EAP-SIM/AKA fast re-authentication to allow use with FILS
  • extended ca_cert_blob to support PEM format
  • improved robustness of P2P Action frame scheduling
  • added support for EAP-SIM/AKA using anonymous@realm identity
  • fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method
  • added experimental support for EAP-TEAP peer (RFC 7170)
  • added experimental support for EAP-TLS peer with TLS v1.3
  • fixed a regression in WMM parameter configuration for a TDLS peer
  • fixed a regression in operation with drivers that offload 802.1X 4-way handshake
  • fixed an ECDH operation corner case with OpenSSL
  • SAE changes
    • added support for SAE Password Identifier
    • changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes
    • do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms
    • fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP
    • started to prefer FT-SAE over SAE AKM if both are enabled
    • started to prefer FT-SAE over FT-PSK if both are enabled
    • fixed FT-SAE when SAE PMKSA caching is used
    • reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256)
    • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)
  • EAP-pwd changes
    • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)
    • verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)
    • fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)
    • enforce rand,mask generation rules more strictly
    • fix a memory leak in PWE derivation
    • disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27)
    • SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)
  • fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  • Hotspot 2.0 changes
    • do not indicate release number that is higher than the one AP supports
    • added support for release number 3
    • enable PMF automatically for…

This update for wpa_supplicant fixes the following issues:

wpa_supplicant was updated to 2.9 release:

• SAE changes
  • disable use of groups using Brainpool curves
  • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
• EAP-pwd changes
  • disable use of groups using Brainpool curves
  • allow the set of groups to be configured (eap_pwd_groups)
  • improved protection against side channel attacks [https://w1.fi/security/2019-6/]
• fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1)
• fixed a regression in OpenSSL 1.1+ engine loading
• added validation of RSNE in (Re)Association Response frames
• fixed DPP bootstrapping URI parser of channel list
• extended EAP-SIM/AKA fast re-authentication to allow use with FILS
• extended ca_cert_blob to support PEM format
• improved robustness of P2P Action frame scheduling
• added support for EAP-SIM/AKA using anonymous@realm identity
• fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method
• added experimental support for EAP-TEAP peer (RFC 7170)
• added experimental support for EAP-TLS peer with TLS v1.3
• fixed a regression in WMM parameter configuration for a TDLS peer
• fixed a regression in operation with drivers that offload 802.1X 4-way handshake
• fixed an ECDH operation corner case with OpenSSL
• SAE changes
  • added support for SAE Password Identifier
  • changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes
  • do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms
  • fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP
  • started to prefer FT-SAE over SAE AKM if both are enabled
  • started to prefer FT-SAE over FT-PSK if both are enabled
  • fixed FT-SAE when SAE PMKSA caching is used
  • reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256)
  • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)
• EAP-pwd changes
  • minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)
  • verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)
  • fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)
  • enforce rand,mask generation rules more strictly
  • fix a memory leak in PWE derivation
  • disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27)
  • SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)
• fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
• Hotspot 2.0 changes
  • do not indicate release number that is higher than the one AP supports
  • added support for release number 3
  • enable PMF automatically for network profiles created from credentials
• fixed OWE network profile saving
• fixed DPP network profile saving
• added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1)
• added Multi-AP backhaul STA support
• fixed build with LibreSSL
• number of MKA/MACsec fixes and extensions
• extended domain_match and domain_suffix_match to allow list of values *…

This update for wpa_supplicant fixes the following issues:

• CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).
• CVE-2019-16275: AP mode PMF disconnection protection bypass (bsc#1150934)

It was discovered that wpa_supplicant incorrectly handled certain management frames. An attacker could possibly use this issue to cause a denial of service.

USN-4136-1 fixed a vulnerability in wpa_supplicant. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that wpa_supplicant incorrectly handled certain management frames. An attacker could possibly use this issue to cause a denial of service.