CVE-2019-5062: High severity hostapd vulnerability

Published Dec 12, 2019

Updated

An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resulting in a denial of service.

Affected Software

1 affected component

w1.fi hostapd=2.6

Event History

Dec 12, 2019

CVE Published

via MITRE·09:36 PM

Data Sourced

via MITRE·09:36 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-5062?

CVE-2019-5062 is a denial-of-service vulnerability in the 802.11w security state handling for hostapd 2.6.

How does CVE-2019-5062 affect hostapd?

CVE-2019-5062 affects hostapd 2.6, specifically the handling of 802.11w security state for connected clients with valid 802.11w sessions.

What is the severity of CVE-2019-5062?

CVE-2019-5062 has a severity rating of 6.5 (high).

How can an attacker exploit CVE-2019-5062?

An attacker can exploit CVE-2019-5062 by simulating an incomplete new association, triggering a deauthentication against stations using 802.11w, resulting in a denial of service.

Is there a fix available for CVE-2019-5062?

Yes, a fix for CVE-2019-5062 is available. It is recommended to update to a version of hostapd that is not affected by this vulnerability.