https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:36:00 +0000 https://vulnerability.circl.lu/vuln/cve-2022-23303 <p><strong>Affected:</strong> Siemens SIDIS Secured SmartPlug</p> <p>The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.</p> <p><strong>Affected:</strong> Siemens SIDIS Secured SmartPlug</p> <p>The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.</p> https://vulnerability.circl.lu/vuln/cve-2022-23303 https://vulnerability.circl.lu/vuln/usn-7317-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: wpa, Ubuntu:22.04:LTS: wpa, Ubuntu:24.04:LTS: wpa</p> <p>George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could possibly use this issue to impersonate a wireless access point, and obtain sensitive information. (CVE-2022-37660)</p> <p>Daniel De Almeida Braga, Mohamed Sabt, and Pierre-Alain Fouque discovered that wpa_supplicant and hostapd were vulnerable to side channel attacks due to the cache access patterns. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-23303, CVE-2022-23304)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: wpa, Ubuntu:22.04:LTS: wpa, Ubuntu:24.04:LTS: wpa</p> <p>George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could possibly use this issue to impersonate a wireless access point, and obtain sensitive information. (CVE-2022-37660)</p> <p>Daniel De Almeida Braga, Mohamed Sabt, and Pierre-Alain Fouque discovered that wpa_supplicant and hostapd were vulnerable to side channel attacks due to the cache access patterns. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-23303, CVE-2022-23304)</p> https://vulnerability.circl.lu/vuln/usn-7317-1