CVEvulnerability
CVE-2017-13081
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-10-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.9 LOW — AV:A/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-323, CWE-330
Description
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Affected configurations
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 17.04
• debian debian linux 8.0
• debian debian linux 9.0
• freebsd freebsd
• freebsd freebsd 10
• freebsd freebsd 10.4
• freebsd freebsd 11
• freebsd freebsd 11.1
• opensuse leap 42.2
• opensuse leap 42.3
• redhat enterprise linux desktop 7
• redhat enterprise linux server 7
• w1.fi hostapd 0.2.4
• w1.fi hostapd 0.2.5
• w1.fi hostapd 0.2.6
• w1.fi hostapd 0.2.8
• w1.fi hostapd 0.3.7
• w1.fi hostapd 0.3.9
• w1.fi hostapd 0.3.10
• w1.fi hostapd 0.3.11
• w1.fi hostapd 0.4.7
• w1.fi hostapd 0.4.8
• w1.fi hostapd 0.4.9
• w1.fi hostapd 0.4.10
• w1.fi hostapd 0.4.11
• w1.fi hostapd 0.5.7
• w1.fi hostapd 0.5.8
• w1.fi hostapd 0.5.9
• w1.fi hostapd 0.5.10
• w1.fi hostapd 0.5.11
• w1.fi hostapd 0.6.8
• w1.fi hostapd 0.6.9
• w1.fi hostapd 0.6.10
• w1.fi hostapd 0.7.3
• w1.fi hostapd 1.0
• w1.fi hostapd 1.1
• w1.fi hostapd 2.0
• w1.fi hostapd 2.1
• w1.fi hostapd 2.2
• w1.fi hostapd 2.3
• w1.fi hostapd 2.4
• w1.fi hostapd 2.5
• w1.fi hostapd 2.6
• w1.fi wpa supplicant 0.2.4
• w1.fi wpa supplicant 0.2.5
• w1.fi wpa supplicant 0.2.6
• w1.fi wpa supplicant 0.2.7
• w1.fi wpa supplicant 0.2.8
• w1.fi wpa supplicant 0.3.7
• w1.fi wpa supplicant 0.3.8
• w1.fi wpa supplicant 0.3.9
• w1.fi wpa supplicant 0.3.10
• w1.fi wpa supplicant 0.3.11
• w1.fi wpa supplicant 0.4.7
• w1.fi wpa supplicant 0.4.8
• w1.fi wpa supplicant 0.4.9
• w1.fi wpa supplicant 0.4.10
• w1.fi wpa supplicant 0.4.11
… and 23 more
Related
References
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html Third Party Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt Third Party Advisory
- http://www.debian.org/security/2017/dsa-3999 Third Party Advisory
- http://www.kb.cert.org/vuls/id/228519 Third Party Advisory, US Government Resource
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html www.oracle.com
- http://www.securityfocus.com/bid/101274 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039573 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039576 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039577 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039578 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039581 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039585 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-3455-1 Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/kracks Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf cert-portal.siemens.com
- https://cert.vde.com/en-us/advisories/vde-2017-005 cert.vde.com
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html lists.debian.org
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc Third Party Advisory
- https://security.gentoo.org/glsa/201711-03 security.gentoo.org
- https://source.android.com/security/bulletin/2017-11-01 source.android.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us support.hpe.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa Third Party Advisory
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt Third Party Advisory
- https://www.krackattacks.com/ Technical Description, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html Third Party Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt Third Party Advisory
- http://www.debian.org/security/2017/dsa-3999 Third Party Advisory
- http://www.kb.cert.org/vuls/id/228519 Third Party Advisory, US Government Resource
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html www.oracle.com
- http://www.securityfocus.com/bid/101274 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039573 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039576 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039577 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039578 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039581 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039585 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-3455-1 Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/kracks Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf cert-portal.siemens.com
- https://cert.vde.com/en-us/advisories/vde-2017-005 cert.vde.com
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html lists.debian.org
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc Third Party Advisory
- https://security.gentoo.org/glsa/201711-03 security.gentoo.org
- https://source.android.com/security/bulletin/2017-11-01 source.android.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us support.hpe.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa Third Party Advisory
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt Third Party Advisory
- https://www.krackattacks.com/ Technical Description, Third Party Advisory