CVE-2022-23303

概要

参考情報

• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPDHU5MV464CZBPX7N2SNMUYP6DFIBZL
• security.gentoo.org/glsa/202309-16
• w1.fi/security/2022-1 · Mitigation
• lists.debian.org/debian-lts-announce/2025/04/msg00019.html
• cert-portal.siemens.com/productcert/html/ssa-585531.html

hostapd のその他の脆弱性

• CVE-2026-58374高 7.1In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing …
• CVE-2025-24912低 3.7hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker i…
• CVE-2022-37660中 6.5In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapp…
• CVE-2022-23304緊急 9.8The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of c…
• CVE-2021-30004中 5.3In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x5…