EXPOSURES › CVE-2022-23303

CVE-2022-23303

CRITICAL

DETAIL

SourceNVD · cve Published2022-01-17 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-23303 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

fedoraproject · vendor w1.fi · vendor fedora · product hostapd · product wpa supplicant · product

DESCRIPTION

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.