Known vulnerabilities in hostapd

Software: hostapd
Software CPE: cpe:2.3:a:jouni_malinen:hostapd:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting hostapd hostapd is affected by 25 known vulnerabilities: 3 high, 17 medium, 5 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106025 - Exposure of sensitive information to an unauthorized actor
CVE-2022-37660
CWE-200 Medium
No
No
2.11 25.03.2025 SB2025031214
SB2025032556
#VU105624 - Premature Release of Resource During Expected Lifetime
CVE-2025-24912
CWE-826 Medium
No
No
- 12.03.2025 SB2025031214
SB2025032192
SB2026022853
and 5 more
#VU59839 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23303
CWE-327 Low
No
No
2.10 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 10 more
#VU59838 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23304
CWE-327 Low
No
No
2.10 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 8 more
#VU59106 - Improper input validation
CVE-2021-30004
CWE-20 Medium
No
No
- 29.12.2021 SB2021040206
SB2021040207
SB2021122905
and 6 more
#VU30346 - Insufficient Entropy
CVE-2019-10064
CWE-331 Medium
No
No
2.6 28.02.2020 SB2020022818
#VU23964 - Permissions, Privileges, and Access Controls
CVE-2019-9499
CWE-264 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041736
and 6 more
#VU23963 - Permissions, Privileges, and Access Controls
CVE-2019-9498
CWE-264 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041735
and 7 more
#VU23962 - Improper Authentication
CVE-2019-9497
CWE-287 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041734
and 7 more
#VU23961 - Improper Authentication
CVE-2019-9496
CWE-287 Medium
No
No
2.8 06.01.2020 SB2019041715
SB2020010606
SB2020021601
and 9 more
#VU31083 - NULL Pointer Dereference
CVE-2019-11555
CWE-476 Medium
No
No
2.8 27.04.2019 SB2019042708
SB2019051019
SB2019051020
and 10 more
#VU40715 - Improper input validation
CVE-2015-4146
CWE-20 Medium
No
No
- 15.06.2015 SB2015061513
SB2016062710
#VU40716 - Resource Management Errors
CVE-2015-4145
CWE-399 Medium
No
No
- 15.06.2015 SB2015061514
SB2017102805
SB2016062710
#VU40717 - Memory corruption
CVE-2015-4144
CWE-119 Medium
No
No
- 15.06.2015 SB2015061515
SB2017102805
SB2016062710
#VU40718 - Memory corruption
CVE-2015-4143
CWE-119 Medium
No
No
- 15.06.2015 SB2015061513
SB2017102805
SB2016062710
#VU32295 - Memory corruption
CVE-2015-4142
CWE-119 Medium
No
No
2.5 15.06.2015 SB2015061502
SB2015061518
SB2015061519
and 10 more
#VU33633 - Heap-based Buffer Overflow
CVE-2015-4141
CWE-122 Medium
No
No
- 15.06.2015 SB2015061510
SB2015061516
SB2015061517
and 2 more
#VU32419 - Improper input validation
CVE-2014-3686
CWE-20 Medium
No
No
2.3 16.10.2014 SB2014101606
SB2014110403
SB2015061524
and 7 more
#VU32434 - Heap-based Buffer Overflow
CVE-2012-4445
CWE-122 Medium
No
No
1.1 10.10.2012 SB2012101001
SB2019100223
SB2019100225
and 2 more
#VU43967 - Permissions, Privileges, and Access Controls
CVE-2012-2389
CWE-264 Low
No
No
- 21.06.2012 SB2012062101


Showing elements 1 - 20 out of 25