Use of a broken or risky cryptographic algorithm in wpa_supplicant and hostapd - CVE-2022-23303

Vulnerability identifier: #VU59839

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-23303

CWE-ID: CWE-327

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to sensitive information on the target system.

The vulnerability exists due to the implementations of SAE are vulnerable to side-channel attacks as a result of cache access patterns. A remote attacker with ability to install and execute applications can crack weak passwords when memory access patterns are visible in a shared cache.

Note, this vulnerability exists due to incomplete fix for #VU23959 (CVE-2019-9494).

wpa_supplicant
hostapd
Crypto Hardware Initialization and Maintenance (CHIM)
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
Slackware Linux
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
openEuler
Ubuntu
Fedora
ESP-IDF
wpa_supplicant-debuginfo
wpa_supplicant-debugsource
wpa_supplicant-gui
wpa_supplicant-help
wpa_supplicant
wpasupplicant (Ubuntu package)
hostapd (Ubuntu package)
net-wireless/hostapd
hostapd

Install updates from vendor's website.

wpa_supplicant - update to 2.10
hostapd - update to 2.10
ESP-IDF - update to 4.3.5
wpa_supplicant-debuginfo - update to 2.6-30
wpa_supplicant-debugsource - update to 2.6-30
wpa_supplicant-gui - update to 2.6-30
wpa_supplicant-help - update to 2.6-30
wpa_supplicant - update to 2.6-30
wpasupplicant (Ubuntu package) - addressed in versions 2:2.9-1ubuntu4.6, 2:2.10-6ubuntu2.2, 2:2.10-21ubuntu0.2, 2:2.10-22ubuntu0.1
hostapd (Ubuntu package) - addressed in versions 2:2.9-1ubuntu4.6, 2:2.10-6ubuntu2.2, 2:2.10-21ubuntu0.2, 2:2.10-22ubuntu0.1
wpa_supplicant-debugsource - addressed in versions 2.9-4.33.1, 2.9-15.22.1, 2.9-23.15.1
wpa_supplicant-debuginfo - addressed in versions 2.9-4.33.1, 2.9-15.22.1, 2.9-23.15.1
wpa_supplicant - addressed in versions 2.9-4.33.1, 2.9-15.22.1, 2.9-23.15.1
net-wireless/hostapd - update to 2.10
wpa_supplicant - update to 2.10-2.fc35
hostapd - update to 2.10-3.fc35

• https://w1.fi/security/2022-1/

• Multiple vulnerabilities in hostapd and wpa_supplicant
• Slackware update for wpa_supplicant
• SUSE update for wpa_supplicant
• SUSE update for wpa_supplicant
• SUSE update for wpa_supplicant
• SUSE update for wpa_supplicant
• Multiple vulnerabilities in ESP-IDF
• Gentoo update for wpa_supplicant, hostapd
• openEuler update for wpa_supplicant
• Fedora 35 update for wpa_supplicant
• Fedora 35 update for hostapd
• Ubuntu update for wpa
• Multiple vulnerabilities in Crypto Hardware Initialization and Maintenance (CHIM) as shipped with IBM Common Cryptographic Architecture (CCA)