Vulnerability Details : CVE-2019-11555

The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.

Vulnerability category: Memory CorruptionDenial of service

Published 2019-04-26 22:29:00

Updated 2019-06-07 03:29:00

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2019-11555

Probability of exploitation activity in the next 30 days: 0.98%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 81 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2019-11555

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	[email protected]
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	[email protected]
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-11555

CWE-476 NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Assigned by: [email protected] (Primary)

References for CVE-2019-11555

Products affected by CVE-2019-11555

W1.fi » Hostapd
Versions before (<) 2.8
cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*
Matching versions
W1.fi » Wpa Supplicant
Versions before (<) 2.8
cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*
Matching versions