Denial-of-Service Vulnerability in Hostapd by Free Software Foundation

CVE-2019-5061

What is CVE-2019-5061?

An exploitable denial-of-service vulnerability exists in Hostapd 2.6 that allows attackers to manipulate the authentication process. By sending forged Authentication and Association Request packets, an attacker can provoke the access point to conduct IAPP location updates for connected stations prematurely. This exploitation may lead to various denial of service scenarios, potentially including CAM table attacks and traffic instability, especially when emulating existing clients in nearby access points within the same wireless environment.

References