Skip to content
COOEY

EXPOSURES › CVE-2022-23304

CVE-2022-23304

CRITICAL
DETAIL
SourceNVD · cve Published2022-01-17 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-23304 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
fedoraproject · vendorw1.fi · vendorfedora · producthostapd · productwpa supplicant · product
DESCRIPTION

The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No sentiment expressed; sources are CVE databases or generic advisories without commentary on vendor response.
cooey ↗ neutral +0.00
Neutral; CVE database entry with no commentary on vendor handling.
linuxsecurity.com ↗ neutral +0.00
Neutral; Fedora advisories page with no specific commentary on CVE-2022-23304.
vulnpedia.com ↗ neutral +0.00
Neutral; Vulnedia is a CVE reference site with no commentary on vendor response.
www.cvefind.com ↗ neutral +0.00
Neutral; CVE Find is a database with no commentary on vendor response.
app.opencve.io ↗ neutral +0.00
Neutral; OpenCVE is a CVE database with no commentary on vendor response.
advisories.gitlab.com ↗ neutral +0.00
Neutral; GitLab Advisory Database is a dependency scanning database with no commentary on vendor response.
www.secureblink.com ↗ neutral +0.00
Neutral; Secure Blink is a threat feed provider with no commentary on vendor response.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.