CVE-2019-11555

Description

The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.

How to fix CVE-2019-11555

To remediate CVE-2019-11555, upgrade the affected package to a fixed version below.

—upgrade to 2.8-r0 or later
—upgrade to 2.7-r3 or later
—upgrade to 2:2.7+git20190128+0c1e29f-5 or later
—upgrade to 2.3-1+deb8u8 or later
—upgrade to 2:2.4-1+deb9u4 or later

Is CVE-2019-11555 being exploited?

Moderate — EPSS is 9.4%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (5)

from 0, < 2.8-r0
from 0, < 2.7-r3
from 0, < 2:2.7+git20190128+0c1e29f-5
from 0, < 2.3-1+deb8u8
from 0, < 2:2.4-1+deb9u4

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H