NetSight
IP …
high8.1

CVE-2017-13082

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BS…

Impact

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04
DebianDebian Linux
Versions 8.0, 9.0
FreebsdFreebsd
All versions
Versions 10, 10.4, 11, 11.1
OpensuseLeap
Versions 42.2, 42.3
RedhatEnterprise Linux Desktop
Version 7
RedhatEnterprise Linux Server
Version 7
W1.FiHostapd
Versions 0.2.4, 0.2.5, 0.2.6, 0.2.8, 0.3.7, 0.3.9
W1.FiWpa Supplicant
Versions 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.3.7
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Point Of Sale
Version 11
SuseLinux Enterprise Server
Versions 11, 12
SuseOpenstack Cloud
Version 6

Weakness classification

CWE-323CWE-330

References