CVE:CVE-2019-13377
CNNVD:CNNVD-201908-310
hostapd是一款访问点和身份验证服务器的用户空间守护程序。wpa_supplicant是一款跨平台的WPA请求程序。该程序支持WEP、WPA和WPA2等。
hostapd和wpa_supplicant 2.x至2.8版本中的SAE和EAP-pwd的实现存在安全漏洞。攻击者可利用该漏洞获取泄露的信息，进而恢复完整的密码。
solution:Upgrade w1.fi hostapd to a higher version than 2.8,and avoid the version [2.0,2.8]; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.04,and avoid the version 18.04,19.04; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0