CVE-2018-14526
08.08.2018, 19:29
An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| debian | debian_linux | 8.0 |
| w1.fi | wpa_supplicant | 2.0 ≤ 𝑥 ≤ 2.6 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References