CVEvulnerability
CVE-2017-13080
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-10-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.9 LOW — AV:A/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-323, CWE-330
Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
Affected configurations
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 17.04
• debian debian linux 8.0
• debian debian linux 9.0
• freebsd freebsd
• freebsd freebsd 10
• freebsd freebsd 10.4
• freebsd freebsd 11
• freebsd freebsd 11.1
• opensuse leap 42.2
• opensuse leap 42.3
• redhat enterprise linux desktop 7
• redhat enterprise linux server 7
• w1.fi hostapd 0.2.4
• w1.fi hostapd 0.2.5
• w1.fi hostapd 0.2.6
• w1.fi hostapd 0.2.8
• w1.fi hostapd 0.3.7
• w1.fi hostapd 0.3.9
• w1.fi hostapd 0.3.10
• w1.fi hostapd 0.3.11
• w1.fi hostapd 0.4.7
• w1.fi hostapd 0.4.8
• w1.fi hostapd 0.4.9
• w1.fi hostapd 0.4.10
• w1.fi hostapd 0.4.11
• w1.fi hostapd 0.5.7
• w1.fi hostapd 0.5.8
• w1.fi hostapd 0.5.9
• w1.fi hostapd 0.5.10
• w1.fi hostapd 0.5.11
• w1.fi hostapd 0.6.8
• w1.fi hostapd 0.6.9
• w1.fi hostapd 0.6.10
• w1.fi hostapd 0.7.3
• w1.fi hostapd 1.0
• w1.fi hostapd 1.1
• w1.fi hostapd 2.0
• w1.fi hostapd 2.1
• w1.fi hostapd 2.2
• w1.fi hostapd 2.3
• w1.fi hostapd 2.4
• w1.fi hostapd 2.5
• w1.fi hostapd 2.6
• w1.fi wpa supplicant 0.2.4
• w1.fi wpa supplicant 0.2.5
• w1.fi wpa supplicant 0.2.6
• w1.fi wpa supplicant 0.2.7
• w1.fi wpa supplicant 0.2.8
• w1.fi wpa supplicant 0.3.7
• w1.fi wpa supplicant 0.3.8
• w1.fi wpa supplicant 0.3.9
• w1.fi wpa supplicant 0.3.10
• w1.fi wpa supplicant 0.3.11
• w1.fi wpa supplicant 0.4.7
• w1.fi wpa supplicant 0.4.8
• w1.fi wpa supplicant 0.4.9
• w1.fi wpa supplicant 0.4.10
• w1.fi wpa supplicant 0.4.11
… and 23 more
Related
References
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html Third Party Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt Third Party Advisory
- http://www.debian.org/security/2017/dsa-3999 Third Party Advisory
- http://www.kb.cert.org/vuls/id/228519 Third Party Advisory, US Government Resource
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html www.oracle.com
- http://www.securityfocus.com/bid/101274 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039572 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039573 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039576 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039577 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039578 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039581 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039585 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039703 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-3455-1 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2907 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2911 Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/kracks Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf cert-portal.siemens.com
- https://cert.vde.com/en-us/advisories/vde-2017-003 cert.vde.com
- https://cert.vde.com/en-us/advisories/vde-2017-005 cert.vde.com
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html lists.debian.org
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080 Vendor Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc Third Party Advisory
- https://security.gentoo.org/glsa/201711-03 security.gentoo.org
- https://source.android.com/security/bulletin/2017-11-01 source.android.com
- https://support.apple.com/HT208219 support.apple.com
- https://support.apple.com/HT208220 support.apple.com
- https://support.apple.com/HT208221 support.apple.com
- https://support.apple.com/HT208222 support.apple.com
- https://support.apple.com/HT208325 support.apple.com
- https://support.apple.com/HT208327 support.apple.com
- https://support.apple.com/HT208334 support.apple.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us support.hpe.com
- https://support.lenovo.com/us/en/product_security/LEN-17420 Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa Third Party Advisory
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.html www.intel.com
- https://www.krackattacks.com/ Technical Description, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html Third Party Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt Third Party Advisory
- http://www.debian.org/security/2017/dsa-3999 Third Party Advisory
- http://www.kb.cert.org/vuls/id/228519 Third Party Advisory, US Government Resource
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html www.oracle.com
- http://www.securityfocus.com/bid/101274 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039572 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039573 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039576 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039577 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039578 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039581 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039585 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039703 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-3455-1 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2907 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2911 Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/kracks Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf cert-portal.siemens.com
- https://cert.vde.com/en-us/advisories/vde-2017-003 cert.vde.com
- https://cert.vde.com/en-us/advisories/vde-2017-005 cert.vde.com
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html lists.debian.org
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080 Vendor Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc Third Party Advisory
- https://security.gentoo.org/glsa/201711-03 security.gentoo.org
- https://source.android.com/security/bulletin/2017-11-01 source.android.com
- https://support.apple.com/HT208219 support.apple.com
- https://support.apple.com/HT208220 support.apple.com
- https://support.apple.com/HT208221 support.apple.com
- https://support.apple.com/HT208222 support.apple.com
- https://support.apple.com/HT208325 support.apple.com
- https://support.apple.com/HT208327 support.apple.com
- https://support.apple.com/HT208334 support.apple.com