cve/2019/CVE-2019-5062.md
2024-06-09 00:33:16 +00:00

19 lines
907 B
Markdown

### [CVE-2019-5062](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5062)
![](https://img.shields.io/static/v1?label=Product&message=W1.f1&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-440%3A%20Expected%20Behavior%20Violation&color=brighgreen)
### Description
An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resulting in a denial of service.
### POC
#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0850
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0850
#### Github
No PoCs found on GitHub currently.