CVE-2019-16275

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is…

published September 12, 2019

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01214 · 68.3th percentile
Published
2019-09-12T19:07Z
EPSS history
Timeline
  • 12 SEP 19:07Z
    hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is…
    cvelistv5