medium5.3
CVE-2017-13080
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio r…
Impact
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 17.04 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
| Freebsd | Freebsd | All versions Versions 10, 10.4, 11, 11.1 |
| Opensuse | Leap | Versions 42.2, 42.3 |
| Redhat | Enterprise Linux Desktop | Version 7 |
| Redhat | Enterprise Linux Server | Version 7 |
| W1.Fi | Hostapd | Versions 0.2.4, 0.2.5, 0.2.6, 0.2.8, 0.3.7, 0.3.9 |
| W1.Fi | Wpa Supplicant | Versions 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.3.7 |
| Suse | Linux Enterprise Desktop | Version 12 |
| Suse | Linux Enterprise Point Of Sale | Version 11 |
| Suse | Linux Enterprise Server | Versions 11, 12 |
| Suse | Openstack Cloud | Version 6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
- http://www.debian.org/security/2017/dsa-3999
- http://www.kb.cert.org/vuls/id/228519
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://www.securityfocus.com/bid/101274
- http://www.securitytracker.com/id/1039572
- http://www.securitytracker.com/id/1039573
- http://www.securitytracker.com/id/1039576
- http://www.securitytracker.com/id/1039577
- http://www.securitytracker.com/id/1039578
- http://www.securitytracker.com/id/1039581
- http://www.securitytracker.com/id/1039585
- http://www.securitytracker.com/id/1039703
- http://www.ubuntu.com/usn/USN-3455-1
- https://access.redhat.com/errata/RHSA-2017:2907
- https://access.redhat.com/errata/RHSA-2017:2911
- https://access.redhat.com/security/vulnerabilities/kracks
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
- https://cert.vde.com/en-us/advisories/vde-2017-003
- https://cert.vde.com/en-us/advisories/vde-2017-005
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html