CVE-2019-16275
First published: Thu Sep 12 2019(Updated: )
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range. An attacker in radio range of the access point could inject a specially constructed unauthenticated IEEE 802.11 frame to the access point to cause associated stations to be disconnected and require a reconnection to the network.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/wpa | <=2:2.9-1<=2:2.4-1+deb9u4<=2:2.4-1<=2:2.7+git20190128+0c1e29f-6 | 2:2.9-2 2:2.7+git20190128+0c1e29f-6+deb10u1 |
| ubuntu/wpa | <2:2.6-15ubuntu2.5 | 2:2.6-15ubuntu2.5 |
| ubuntu/wpa | <2:2.6-21ubuntu3.3 | 2:2.6-21ubuntu3.3 |
| ubuntu/wpa | <2.1-0ubuntu1.7+ | 2.1-0ubuntu1.7+ |
| ubuntu/wpa | <2.4-0ubuntu6.6 | 2.4-0ubuntu6.6 |
| debian/wpa | 2:2.9.0-21+deb11u2 2:2.10-12+deb12u2 2:2.10-22 | |
| w1.fi hostapd | <=2.9 | |
| wpa supplicant | <=2.9 | |
| Debian GNU/Linux | =8.0 | |
| Debian GNU/Linux | =10.0 | |
| Ubuntu Linux | =12.04 | |
| Ubuntu Linux | =14.04 | |
| Ubuntu Linux | =16.04 | |
| Ubuntu Linux | =18.04 | |
| Ubuntu Linux | =19.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.openwall.com/lists/oss-security/2019/09/11/7
- https://w1.fi/security/2019-7/
- https://security-tracker.debian.org/tracker/CVE-2019-16275
- https://w1.fi/security/2019-6/
- https://wpa3.mathyvanhoef.com/
- https://security-tracker.debian.org/tracker/CVE-2019-13377
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940080
- http://www.openwall.com/lists/oss-security/2019/09/12/6
- https://lists.debian.org/debian-lts-announce/2019/09/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36G4XAZ644DMHBLKOL4FDSPZVIGNQY6U/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B7NCLOPTZNRRNYODH22BFIDH6YIQWLJD/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEGITWRTIWABW54ANEPCEF4ARZLXGSK5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HY6STGJIIROVNIU6VMB2WTN2Q5M65WF4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBJXUKV6XMSELWNXPS37CSUIH5EUHFXQ/
- https://seclists.org/bugtraq/2019/Sep/56
- https://usn.ubuntu.com/4136-1/
- https://usn.ubuntu.com/4136-2/
- https://w1.fi/security/2019-7/ap-mode-pmf-disconnection-protection-bypass.txt
- https://www.debian.org/security/2019/dsa-4538
- https://launchpad.net/bugs/cve/CVE-2019-16275
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36G4XAZ644DMHBLKOL4FDSPZVIGNQY6U/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7NCLOPTZNRRNYODH22BFIDH6YIQWLJD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FEGITWRTIWABW54ANEPCEF4ARZLXGSK5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HY6STGJIIROVNIU6VMB2WTN2Q5M65WF4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBJXUKV6XMSELWNXPS37CSUIH5EUHFXQ/
- https://ubuntu.com/security/notices/USN-4136-1
- https://ubuntu.com/security/notices/USN-4136-2
- https://www.cve.org/CVERecord?id=CVE-2019-16275
- https://nvd.nist.gov/vuln/detail/CVE-2019-16275
- https://w1.fi/security/2019-7/0001-AP-Silently-ignore-management-frame-from-unexpected-.patch
- https://ubuntu.com/security/CVE-2019-16275
Frequently Asked Questions
What is CVE-2019-16275?
CVE-2019-16275 is a vulnerability that allows an incorrect indication of disconnection in hostapd and wpa_supplicant due to mishandled source address validation, leading to a denial of service.
What is the severity of CVE-2019-16275?
CVE-2019-16275 has a severity value of 6.5, which is considered medium.
Which software is affected by CVE-2019-16275?
hostapd versions before 2.10 and wpa_supplicant versions before 2.10 are affected by CVE-2019-16275.
What is the remedy for CVE-2019-16275?
To fix CVE-2019-16275, update hostapd to version 2.10 or later, and update wpa_supplicant to version 2.10 or later.
Where can I find more information about CVE-2019-16275?
You can find more information about CVE-2019-16275 on the following references: [1] [2] [3].
- collector/debian-bugs
- alias/CVE-2019-16275
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/software-canonical-lookup
- agent/references
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/trending
- agent/source
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- package-manager/debian
- package-manager/ubuntu
- vendor/w1.fi
- canonical/w1.fi hostapd
- version/w1.fi hostapd/2.9
- canonical/wpa supplicant
- version/wpa supplicant/2.9
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/8.0
- version/debian gnu/linux/10.0
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/12.04
- version/ubuntu linux/14.04
- version/ubuntu linux/16.04
- version/ubuntu linux/18.04
- version/ubuntu linux/19.04