NetSight
IP …
medium5.3

CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake…

Impact

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04
DebianDebian Linux
Versions 8.0, 9.0
FreebsdFreebsd
All versions
Versions 10, 10.4, 11, 11.1
OpensuseLeap
Versions 42.2, 42.3
RedhatEnterprise Linux Desktop
Version 7
RedhatEnterprise Linux Server
Version 7
W1.FiHostapd
Versions 0.2.4, 0.2.5, 0.2.6, 0.2.8, 0.3.7, 0.3.9
W1.FiWpa Supplicant
Versions 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.3.7
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Point Of Sale
Version 11
SuseLinux Enterprise Server
Versions 11, 12
SuseOpenstack Cloud
Version 6

Weakness classification

CWE-323CWE-330

References