CVEvulnerability

CVE-2017-13084

6.8 MEDIUM Published 2017-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
5.4 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-323, CWE-330

Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Affected configurations

• canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 17.04 • debian debian linux 8.0 • debian debian linux 9.0 • freebsd freebsd • freebsd freebsd 10 • freebsd freebsd 10.4 • freebsd freebsd 11 • freebsd freebsd 11.1 • opensuse leap 42.2 • opensuse leap 42.3 • redhat enterprise linux desktop 7 • redhat enterprise linux server 7 • w1.fi hostapd 0.2.4 • w1.fi hostapd 0.2.5 • w1.fi hostapd 0.2.6 • w1.fi hostapd 0.2.8 • w1.fi hostapd 0.3.7 • w1.fi hostapd 0.3.9 • w1.fi hostapd 0.3.10 • w1.fi hostapd 0.3.11 • w1.fi hostapd 0.4.7 • w1.fi hostapd 0.4.8 • w1.fi hostapd 0.4.9 • w1.fi hostapd 0.4.10 • w1.fi hostapd 0.4.11 • w1.fi hostapd 0.5.7 • w1.fi hostapd 0.5.8 • w1.fi hostapd 0.5.9 • w1.fi hostapd 0.5.10 • w1.fi hostapd 0.5.11 • w1.fi hostapd 0.6.8 • w1.fi hostapd 0.6.9 • w1.fi hostapd 0.6.10 • w1.fi hostapd 0.7.3 • w1.fi hostapd 1.0 • w1.fi hostapd 1.1 • w1.fi hostapd 2.0 • w1.fi hostapd 2.1 • w1.fi hostapd 2.2 • w1.fi hostapd 2.3 • w1.fi hostapd 2.4 • w1.fi hostapd 2.5 • w1.fi hostapd 2.6 • w1.fi wpa supplicant 0.2.4 • w1.fi wpa supplicant 0.2.5 • w1.fi wpa supplicant 0.2.6 • w1.fi wpa supplicant 0.2.7 • w1.fi wpa supplicant 0.2.8 • w1.fi wpa supplicant 0.3.7 • w1.fi wpa supplicant 0.3.8 • w1.fi wpa supplicant 0.3.9 • w1.fi wpa supplicant 0.3.10 • w1.fi wpa supplicant 0.3.11 • w1.fi wpa supplicant 0.4.7 • w1.fi wpa supplicant 0.4.8 • w1.fi wpa supplicant 0.4.9 • w1.fi wpa supplicant 0.4.10 • w1.fi wpa supplicant 0.4.11 … and 23 more

Related

Weakness · CWE (2)

  • CWE-323 Reusing a Nonce, Key Pair in Encryption weakness
  • CWE-330 Use of Insufficiently Random Values weakness

References