NVD disclosure day

Published threat advisories for January 17, 2022

CVE-2022-23304

hostapd and wpa_supplicant EAP-pwd Side-Channel Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A side-channel vulnerability in Wi-Fi authentication software allows attackers to infer sensitive information by observing cache access patterns during EAP-pwd authentication. This could lead to unauthorized access and compromise of confidentiality, integrity, and availability if reachable.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2022-23303

Hostapd and WPA Supplicant SAE Side Channel Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks due to cache access patterns. If reachable, an attacker could potentially infer sensitive information or disrupt services by exploiting this weakness, impacting network confidentiality, integrity, and availability. Confirming th

NVD modified: NVD date unavailable