Known vulnerabilities in hostapd

Software: hostapd
Software CPE: cpe:2.3:a:jouni_malinen:hostapd:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting hostapd hostapd is affected by 25 known vulnerabilities: 3 high, 17 medium, 5 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106025 - Exposure of sensitive information to an unauthorized actor
CVE-2022-37660
CWE-200 Medium
No
No
2.11 25.03.2025 SB2025031214
SB2025032556
#VU105624 - Premature Release of Resource During Expected Lifetime
CVE-2025-24912
CWE-826 Medium
No
No
- 12.03.2025 SB2025031214
SB2025032192
SB2026022853
and 5 more
#VU59839 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23303
CWE-327 Low
No
No
2.10 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 10 more
#VU59838 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23304
CWE-327 Low
No
No
2.10 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 8 more
#VU59106 - Improper input validation
CVE-2021-30004
CWE-20 Medium
No
No
- 29.12.2021 SB2021040206
SB2021040207
SB2021122905
and 6 more
#VU30346 - Insufficient Entropy
CVE-2019-10064
CWE-331 Medium
No
No
2.6 28.02.2020 SB2020022818
#VU23964 - Permissions, Privileges, and Access Controls
CVE-2019-9499
CWE-264 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041736
and 6 more
#VU23963 - Permissions, Privileges, and Access Controls
CVE-2019-9498
CWE-264 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041735
and 7 more
#VU23962 - Improper Authentication
CVE-2019-9497
CWE-287 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041734
and 7 more
#VU23961 - Improper Authentication
CVE-2019-9496
CWE-287 Medium
No
No
2.8 06.01.2020 SB2019041715
SB2020010606
SB2020021601
and 9 more
#VU23960 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-9495
CWE-327 Low
No
No
2.8 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 8 more
#VU23959 - Exposure of sensitive information to an unauthorized actor
CVE-2019-9494
CWE-200 Medium
No
No
2.8 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 10 more
#VU23612 - Expected Behavior Violation
CVE-2019-5061
CWE-440 Medium
No
No
2.7 16.12.2019 SB2019121606
#VU23611 - Expected Behavior Violation
CVE-2019-5062
CWE-440 Medium
No
No
2.7 16.12.2019 SB2019121606
#VU31083 - NULL Pointer Dereference
CVE-2019-11555
CWE-476 Medium
No
No
2.8 27.04.2019 SB2019042708
SB2019051019
SB2019051020
and 9 more
#VU11265 - Memory corruption
CVE-2015-5314
CWE-119 Low
No
No
- 26.03.2018 SB2015111001
SB2015112001
SB2017102805
#VU40715 - Improper input validation
CVE-2015-4146
CWE-20 Medium
No
No
- 15.06.2015 SB2015061513
SB2016062710
#VU40716 - Resource Management Errors
CVE-2015-4145
CWE-399 Medium
No
No
- 15.06.2015 SB2015061514
SB2017102805
SB2016062710
#VU40717 - Memory corruption
CVE-2015-4144
CWE-119 Medium
No
No
- 15.06.2015 SB2015061515
SB2017102805
SB2016062710
#VU40718 - Memory corruption
CVE-2015-4143
CWE-119 Medium
No
No
- 15.06.2015 SB2015061513
SB2017102805
SB2016062710


Showing elements 1 - 20 out of 25