USN-7317-1: wpa_supplicant and hostapd vulnerabilities
George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpasupplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could possibly use this issue to impersonate a wireless access point, and obtain sensitive information. (CVE-2022-37660) Daniel De Almeida Braga, Mohamed Sabt, and Pierre-Alain Fouque discovered that wpasupplicant and hostapd were vulnerable to side channel attacks due to the cache access patterns. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-23303, CVE-2022-23304)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7317-1?
The severity of USN-7317-1 is primarily high due to the potential for attackers to impersonate wireless access points and steal sensitive information.
How do I fix USN-7317-1?
To fix USN-7317-1, update the affected packages 'hostapd' and 'wpa_supplicant' to the recommended versions for your Ubuntu release.
Which versions of Ubuntu are affected by USN-7317-1?
USN-7317-1 affects Ubuntu 20.04, 22.04, and 24.10 installations with specific outdated versions of 'hostapd' and 'wpa_supplicant'.
What packages are vulnerable in USN-7317-1?
The vulnerable packages in USN-7317-1 are 'hostapd' and 'wpa_supplicant' that are below the specified fixed versions.
Who discovered the vulnerability reported in USN-7317-1?
The vulnerability in USN-7317-1 was discovered by researchers George Chatzisofroniou and Panayiotis Kotzanikolaou.