{"id":"CLEANSTART-2023-MT89346","summary":"invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode","details":"Security vulnerability affects the hostapd package. An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode.","modified":"2026-10-31T15:46:08.466653854Z","published":"2026-10-31T14:39:00.516355Z","upstream":["CVE-2019-9496"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2023/CLEANSTART-2023-MT89346.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9496"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9496"}],"affected":[{"package":{"name":"hostapd","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/hostapd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2023/CLEANSTART-2023-MT89346.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}