Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2019-13456
HistoryDec 03, 2019 - 8:15 p.m.

CVE-2019-13456

2019-12-0320:15:11
Google
osv.dev
19

AI Score

6.8

Confidence

Low

EPSS

0.008

Percentile

82.5%

JSON

In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the “Dragonblood” attack and CVE-2019-9494.

Related

nvd 5
debiancve 4
nessus 46
ubuntucve 4
openvas 30
prion 4
cvelist 4
cve 5
redhat 2
fedora 10
veracode 1
oraclelinux 2
redhatcve 2
thn 2
alpinelinux 3
osv 6
freebsd 2
suse 4
mageia 3
centos 1
amazon 1
hackerone 1
fortinet 1
cert 1
debian 1
freebsd_advisory 1
photon 2
rosalinux 1
nvd
nvd
CVE-2019-13456
2019-12-03 20:15:11
CVE-2019-9494
2019-04-17 14:29:03
CVE-2019-20510
2020-03-18 01:15:11
debiancve
debiancve
CVE-2019-13456
2019-12-03 20:15:11
CVE-2019-9494
2019-04-17 14:29:03
CVE-2019-9495
2019-04-17 14:29:03
nessus
nessus
Oracle Linux 8 : freeradius:3.0 (ELSA-2020-1672)
2023-09-07 00:00:00
EulerOS 2.0 SP8 : freeradius (EulerOS-SA-2020-1005)
2020-01-02 00:00:00
EulerOS 2.0 SP3 : freeradius (EulerOS-SA-2020-2133)
2020-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2019-13456
2019-12-03 00:00:00
CVE-2019-9494
2019-04-10 00:00:00
CVE-2019-9495
2019-04-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2020-1005)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2020-2133)
2020-09-29 00:00:00
Fedora Update for freeradius FEDORA-2019-17ed521527
2019-12-04 00:00:00
prion
prion
Default credentials
2019-12-03 20:15:00
Design/Logic Flaw
2019-04-17 14:29:00
Default configuration
2019-04-17 14:29:00
cvelist
cvelist
CVE-2019-13456
2019-12-03 19:53:53
CVE-2019-9494 The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks
2019-04-17 13:31:08
CVE-2019-9495 The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns
2019-04-17 13:31:08
cve
cve
CVE-2019-13456
2019-12-03 20:15:11
CVE-2019-9494
2019-04-17 14:29:03
CVE-2019-20510
2020-03-18 01:15:11
redhat
redhat
(RHSA-2020:1672) Moderate: freeradius:3.0 security update
2020-04-28 09:03:31
(RHSA-2020:3984) Moderate: freeradius security and bug fix update
2020-09-29 07:48:48
fedora
fedora
[SECURITY] Fedora 31 Update: freeradius-3.0.20-1.fc31
2019-12-01 00:46:59
[SECURITY] Fedora 30 Update: freeradius-3.0.20-1.fc30
2019-12-01 01:04:29
[SECURITY] Fedora 30 Update: wpa_supplicant-2.7-5.fc30
2019-04-15 00:04:30
veracode
veracode
Information Leakage
2020-10-01 03:53:18
oraclelinux
oraclelinux
freeradius:3.0 security update
2020-05-05 00:00:00
freeradius security and bug fix update
2020-10-06 00:00:00
redhatcve
redhatcve
CVE-2019-13456
2019-08-06 02:07:42
CVE-2019-9494
2020-03-29 14:08:00
thn
thn
Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password
2019-04-10 18:30:00
Researchers Discover New Ways to Hack WPA3 Protected WiFi Passwords
2019-08-03 09:23:00
alpinelinux
alpinelinux
CVE-2019-9494
2019-04-17 14:29:03
CVE-2019-9495
2019-04-17 14:29:03
CVE-2022-23303
2022-01-17 02:15:06
osv
osv
CVE-2019-9494
2019-04-17 14:29:03
CVE-2022-23303
2022-01-17 02:15:06
CVE-2019-9495
2019-04-17 14:29:03
freebsd
freebsd
FreeBSD -- SAE side-channel attacks
2019-04-10 00:00:00
FreeBSD -- EAP-pwd side-channel attack
2019-04-10 00:00:00
suse
suse
Security update for freeradius-server (moderate)
2020-04-26 00:00:00
Security update for hostapd (moderate)
2020-02-15 00:00:00
Security update for wpa_supplicant (moderate)
2020-11-27 00:00:00
mageia
mageia
Updated wpa_supplicant packages fix security vulnerability
2022-01-18 22:29:46
Updated wpa_supplicant and hostapd packages fix security vulnerability
2019-08-31 16:22:36
Updated freeradius packages fix security vulnerabilities
2020-01-05 18:37:51
centos
centos
freeradius security update
2020-10-20 18:02:54
amazon
amazon
Medium: freeradius
2020-10-22 17:34:00
hackerone
hackerone
Internet Bug Bounty: Dragonblood: Design and Implementation Flaws in WPA3 and EAP-pwd
2019-11-24 10:24:11
fortinet
fortinet
Protect
2020-01-03 00:00:00
cert
cert
WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant
2019-04-12 00:00:00
debian
debian
[SECURITY] [DSA 4430-1] wpa security update
2019-04-11 06:12:24
freebsd_advisory
freebsd_advisory
FreeBSD-SA-19:03.wpa
2019-05-14 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2019-0023
2019-07-04 00:00:00
Critical Photon OS Security Update - PHSA-2019-3.0-0023
2019-07-03 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1998
2021-07-02 18:21:00

AI Score

6.8

Confidence

Low

EPSS

0.008

Percentile

82.5%

JSON
Related for OSV:CVE-2019-13456
nvd5debiancve4nessus46ubuntucve4openvas30prion4cvelist4cve5redhat2fedora10veracode1oraclelinux2redhatcve2thn2alpinelinux3osv6freebsd2suse4mageia3centos1amazon1hackerone1fortinet1cert1debian1freebsd_advisory1photon2rosalinux1