W1.fi Hostapd vulnerabilities

• jouni malinen hostapd In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link... CVE-2026-58374 Fix available 6.5 MediumJune 30, 2026
• jouni malinen hostapd hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi... CVE-2025-24912 Fix available 3.7 LowMarch 12, 2025
• w1.fi hostapd, siemens sidis secured smartplug +1 more In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX... CVE-2022-37660 Fix available 6.5 MediumFebruary 11, 2025
• w1.fi hostapd, fedoraproject fedora, siemens sidis secured smartplug +1 more +3 more The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are... CVE-2022-23304 Fix available 9.8 CriticalJanuary 17, 2022
• w1.fi hostapd, fedoraproject fedora, siemens sidis secured smartplug +1 more +3 more The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable... CVE-2022-23303 Public exploitFix available 9.8 CriticalJanuary 17, 2022
• w1.fi hostapd, wpa supplicant +1 more In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier... CVE-2021-30004 Fix available 5.3 MediumApril 2, 2021
• asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 more The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the... CVE-2020-12695 Public exploitFix available EPSS 15.2% 7.5 HighJune 8, 2020
• w1.fi hostapd, debian linux +1 more hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library... CVE-2019-10064 Fix available 7.5 HighFebruary 28, 2020
• w1.fi hostapd An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for... CVE-2019-5062 7.4 HighDecember 12, 2019
• w1.fi hostapd An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could... CVE-2019-5061 Fix available 7.4 HighDecember 12, 2019
• w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 more hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection... CVE-2019-16275 Fix available 6.5 MediumSeptember 12, 2019
• w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 more The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are... CVE-2019-13377 Fix available 5.9 MediumAugust 8, 2019
• w1.fi hostapd, wpa supplicant +1 more The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer)... CVE-2019-11555 Fix available 5.9 MediumApril 26, 2019
• w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +2 more +4 more An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps CVE-2019-9496 Fix available 7.5 HighApril 17, 2019
• w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 more The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks CVE-2019-9494 Fix available 5.9 MediumApril 17, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 more The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit CVE-2019-9499 Fix available 8.1 HighApril 10, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 more The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit CVE-2019-9498 Fix available 8.1 HighApril 10, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +4 more +6 more The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit CVE-2019-9497 Fix available 8.1 HighApril 10, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 more The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns CVE-2019-9495 Fix available 3.7 LowApril 10, 2019
• w1.fi hostapd hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random()... CVE-2016-10743 Fix available 7.5 HighMarch 23, 2019
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)... CVE-2017-13084 6.8 MediumOctober 17, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity... CVE-2017-13088 Fix available 5.3 MediumOctober 16, 2017
• canonical ubuntu linux, debian linux, freebsd +9 more +11 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group... CVE-2017-13087 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ... CVE-2017-13086 Fix available 6.8 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the... CVE-2017-13082 Fix available 8.1 HighOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... CVE-2017-13081 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... CVE-2017-13080 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... CVE-2017-13079 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... CVE-2017-13078 Fix available 5.3 MediumOctober 16, 2017
• wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)... CVE-2017-13077 Fix available 6.8 MediumOctober 16, 2017
• w1.fi hostapd, canonical ubuntu linux, w1.fi wpa supplicant +2 more hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters... CVE-2016-4476 Fix available 7.5 HighMay 9, 2016
• w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 more Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant... CVE-2015-8041 Fix available 5.0 MediumNovember 9, 2015
• w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 more The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the... CVE-2015-4146 Fix available 5.0 MediumJune 1, 2015
• w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 more The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not... CVE-2015-4145 Fix available 5.0 MediumJune 1, 2015
• w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 more The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not... CVE-2015-4144 Fix available 5.0 MediumJune 1, 2015
• w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 more The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows... CVE-2015-4143 Fix available 5.0 MediumJune 1, 2015
• w1.fi hostapd, opensuse, redhat enterprise linux desktop +4 more +6 more Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant... CVE-2015-4142 Fix available 4.3 MediumJune 1, 2015
• w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 more The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external... CVE-2015-4141 Fix available 4.3 MediumJune 1, 2015
• w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 more wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using... CVE-2014-3686 Fix available 6.8 MediumOctober 9, 2014
• w1.fi hostapd Heap-based buffer overflow in the eap_server_tls_process_fragment function in... CVE-2012-4445 Fix available 4.3 MediumOctober 8, 2012
• w1.fi hostapd hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd... CVE-2012-2389 2.1 LowJune 21, 2012