Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
hostapd 安全漏洞
Vulnerability Description
hostapd是Jouni Malinen个人开发者的一款访问点和身份验证服务器的用户空间守护程序。 hostapd 2.10及之前版本存在安全漏洞，该漏洞源于PKEX代码在成功关联后仍保持激活状态，从而容易受到攻击。
CVSS Information
N/A
Vulnerability Type
N/A