EXPOSURES › CVE-2022-23303

CVE-2022-23303

CRITICAL

DETAIL

SourceNVD · cve Published2022-01-17 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-23303 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

fedoraproject · vendor w1.fi · vendor fedora · product hostapd · product wpa supplicant · product

DESCRIPTION

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

SENTIMENT · TRUSTED SOURCES

synthesis severe-fallout -0.60

Incomplete fix for prior vulnerability led to new side-channel attack vector in widely used wireless security components.

cooey ↗ severe-fallout -0.60

Incomplete remediation of prior CVE allowed new side-channel vulnerability in hostapd and wpa_supplicant.

"NOTE: this issue exists because of an incomplete fix for CVE-2019-9494."

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.