Skip to content
GitLab
Explore
Sign in
Register
Commits on Source (2)
wpa/CVE-2019-9494,CVE-2019-9496: ignore SAE-related vulnerabilities
· 27d69418
Sylvain Beucler
authored
Apr 11, 2019
27d69418
dla: add wpa
· 6f93468a
Sylvain Beucler
authored
Apr 11, 2019
6f93468a
Show whitespace changes
Inline
Side-by-side
data/CVE/list
View file @
6f93468a
...
...
@@ -4525,6 +4525,7 @@ CVE-2019-9496 [SAE confirm missing state validation in hostapd/AP]
RESERVED
- wpa 2:2.7+git20190128+0c1e29f-4 (bug #926801)
[stretch] - wpa <ignored> (SAE code not enabled for build in stretch)
[jessie] - wpa <ignored> (SAE code not enabled for build in jessie)
NOTE: https://w1.fi/security/2019-3/sae-confirm-missing-state-validation.txt
NOTE: Patches: https://w1.fi/security/2019-3/
NOTE: CONFIG_SAE=y enabled since 2:2.7~git20180706+420b5dd-1
...
...
@@ -4537,6 +4538,7 @@ CVE-2019-9494 [cache attack against SAE]
RESERVED
- wpa 2:2.7+git20190128+0c1e29f-4 (bug #926801)
[stretch] - wpa <ignored> (SAE code not enabled for build in stretch)
[jessie] - wpa <ignored> (SAE code not enabled for build in jessie)
NOTE: https://w1.fi/security/2019-1/sae-side-channel-attacks.txt
NOTE: Patches: https://w1.fi/security/2019-1/
NOTE: CONFIG_SAE=y enabled since 2:2.7~git20180706+420b5dd-1
data/dla-needed.txt
View file @
6f93468a
...
...
@@ -119,5 +119,7 @@ wireshark (Hugo Lefeuvre)
wordpress
NOTE: 20190401: remaining one issue (CVE-2019-8943). Waiting for upstream patch (abhijith)
--
wpa
--
xen (worked on by credative)
--