Vulnetix
Try Vulnetix Request Demo
CVE-2019-16275 PUBLISHED

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range. An attacker in radio range of the access point could inject a specially constructed unauthenticated IEEE 802.11 frame to the access point to cause associated stations to be disconnected and require a reconnection to the network.

EPSS 0.50% · 65.9th percentile

Risk Scores

EPSS Score
0.50%
65.9th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSwpa2:2.6-15ubuntu2.4, 2:2.6-15ubuntu2.3, 2:2.6-15ubuntu2.2
Ubuntu:Pro:14.04:LTSwpa2.1-0ubuntu1.5, 2.1-0ubuntu1.6, 2.1-0ubuntu1.7
Ubuntu:16.04:LTSwpa2.4-0ubuntu6.5, 2.4-0ubuntu6.4, 2.4-0ubuntu6.3

Timeline

References

Open in Interactive Console →