CVE-2017-13078

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.04
debiandebian_linux
8.0
debiandebian_linux
9.0
freebsdfreebsd
*
freebsdfreebsd
10.4
freebsdfreebsd
11.1
opensuseleap
42.2
opensuseleap
42.3
w1.fihostapd
0.2.4
w1.fihostapd
0.2.5
w1.fihostapd
0.2.6
w1.fihostapd
0.2.8
w1.fihostapd
0.3.7
w1.fihostapd
0.3.9
w1.fihostapd
0.3.10
w1.fihostapd
0.3.11
w1.fihostapd
0.4.7
w1.fihostapd
0.4.8
w1.fihostapd
0.4.9
w1.fihostapd
0.4.10
w1.fihostapd
0.4.11
w1.fihostapd
0.5.7
w1.fihostapd
0.5.8
w1.fihostapd
0.5.9
w1.fihostapd
0.5.10
w1.fihostapd
0.5.11
w1.fihostapd
0.6.8
w1.fihostapd
0.6.9
w1.fihostapd
0.6.10
w1.fihostapd
0.7.3
w1.fihostapd
1.0
w1.fihostapd
1.1
w1.fihostapd
2.0
w1.fihostapd
2.1
w1.fihostapd
2.2
w1.fihostapd
2.3
w1.fihostapd
2.4
w1.fihostapd
2.5
w1.fihostapd
2.6
w1.fiwpa_supplicant
0.2.4
w1.fiwpa_supplicant
0.2.5
w1.fiwpa_supplicant
0.2.6
w1.fiwpa_supplicant
0.2.7
w1.fiwpa_supplicant
0.2.8
w1.fiwpa_supplicant
0.3.7
w1.fiwpa_supplicant
0.3.8
w1.fiwpa_supplicant
0.3.9
w1.fiwpa_supplicant
0.3.10
w1.fiwpa_supplicant
0.3.11
w1.fiwpa_supplicant
0.4.7
w1.fiwpa_supplicant
0.4.8
w1.fiwpa_supplicant
0.4.9
w1.fiwpa_supplicant
0.4.10
w1.fiwpa_supplicant
0.4.11
w1.fiwpa_supplicant
0.5.7
w1.fiwpa_supplicant
0.5.8
w1.fiwpa_supplicant
0.5.9
w1.fiwpa_supplicant
0.5.10
w1.fiwpa_supplicant
0.5.11
w1.fiwpa_supplicant
0.6.8
w1.fiwpa_supplicant
0.6.9
w1.fiwpa_supplicant
0.6.10
w1.fiwpa_supplicant
0.7.3
w1.fiwpa_supplicant
1.0
w1.fiwpa_supplicant
1.1
w1.fiwpa_supplicant
2.0
w1.fiwpa_supplicant
2.1
w1.fiwpa_supplicant
2.2
w1.fiwpa_supplicant
2.3
w1.fiwpa_supplicant
2.4
w1.fiwpa_supplicant
2.5
w1.fiwpa_supplicant
2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firmware-nonfree
bullseye/non-free
20210315-3
fixed
jessie
no-dsa
bookworm/non-free-firmware
20230210-5
fixed
sid/non-free-firmware
20240909-2
fixed
trixie/non-free-firmware
20240909-2
fixed
wpa
bullseye (security)
2:2.9.0-21+deb11u2
fixed
bullseye
2:2.9.0-21+deb11u2
fixed
jessie
no-dsa
bookworm
2:2.10-12+deb12u2
fixed
bookworm (security)
2:2.10-12+deb12u2
fixed
sid
2:2.10-22
fixed
trixie
2:2.10-22
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wpa
zesty
Fixed 2.4-0ubuntu9.1
released
xenial
Fixed 2.4-0ubuntu6.2
released
trusty
Fixed 2.1-0ubuntu1.5
released
References