CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
VendorProductVersion
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.04
debiandebian_linux
8.0
debiandebian_linux
9.0
freebsdfreebsd
*
freebsdfreebsd
10.4
freebsdfreebsd
11.1
opensuseleap
42.2
opensuseleap
42.3
w1.fihostapd
0.2.4
w1.fihostapd
0.2.5
w1.fihostapd
0.2.6
w1.fihostapd
0.2.8
w1.fihostapd
0.3.7
w1.fihostapd
0.3.9
w1.fihostapd
0.3.10
w1.fihostapd
0.3.11
w1.fihostapd
0.4.7
w1.fihostapd
0.4.8
w1.fihostapd
0.4.9
w1.fihostapd
0.4.10
w1.fihostapd
0.4.11
w1.fihostapd
0.5.7
w1.fihostapd
0.5.8
w1.fihostapd
0.5.9
w1.fihostapd
0.5.10
w1.fihostapd
0.5.11
w1.fihostapd
0.6.8
w1.fihostapd
0.6.9
w1.fihostapd
0.6.10
w1.fihostapd
0.7.3
w1.fihostapd
1.0
w1.fihostapd
1.1
w1.fihostapd
2.0
w1.fihostapd
2.1
w1.fihostapd
2.2
w1.fihostapd
2.3
w1.fihostapd
2.4
w1.fihostapd
2.5
w1.fihostapd
2.6
w1.fiwpa_supplicant
0.2.4
w1.fiwpa_supplicant
0.2.5
w1.fiwpa_supplicant
0.2.6
w1.fiwpa_supplicant
0.2.7
w1.fiwpa_supplicant
0.2.8
w1.fiwpa_supplicant
0.3.7
w1.fiwpa_supplicant
0.3.8
w1.fiwpa_supplicant
0.3.9
w1.fiwpa_supplicant
0.3.10
w1.fiwpa_supplicant
0.3.11
w1.fiwpa_supplicant
0.4.7
w1.fiwpa_supplicant
0.4.8
w1.fiwpa_supplicant
0.4.9
w1.fiwpa_supplicant
0.4.10
w1.fiwpa_supplicant
0.4.11
w1.fiwpa_supplicant
0.5.7
w1.fiwpa_supplicant
0.5.8
w1.fiwpa_supplicant
0.5.9
w1.fiwpa_supplicant
0.5.10
w1.fiwpa_supplicant
0.5.11
w1.fiwpa_supplicant
0.6.8
w1.fiwpa_supplicant
0.6.9
w1.fiwpa_supplicant
0.6.10
w1.fiwpa_supplicant
0.7.3
w1.fiwpa_supplicant
1.0
w1.fiwpa_supplicant
1.1
w1.fiwpa_supplicant
2.0
w1.fiwpa_supplicant
2.1
w1.fiwpa_supplicant
2.2
w1.fiwpa_supplicant
2.3
w1.fiwpa_supplicant
2.4
w1.fiwpa_supplicant
2.5
w1.fiwpa_supplicant
2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firmware-nonfree
bullseye/non-free
20210315-3
fixed
jessie
no-dsa
bookworm/non-free-firmware
20230210-5
fixed
sid/non-free-firmware
20240909-2
fixed
trixie/non-free-firmware
20240909-2
fixed
wpa
bullseye (security)
2:2.9.0-21+deb11u2
fixed
bullseye
2:2.9.0-21+deb11u2
fixed
jessie
no-dsa
bookworm
2:2.10-12+deb12u2
fixed
bookworm (security)
2:2.10-12+deb12u2
fixed
sid
2:2.10-22
fixed
trixie
2:2.10-22
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wpa
zesty
Fixed 2.4-0ubuntu9.1
released
xenial
Fixed 2.4-0ubuntu6.2
released
trusty
Fixed 2.1-0ubuntu1.5
released
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
http://www.debian.org/security/2017/dsa-3999
http://www.kb.cert.org/vuls/id/228519
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
http://www.securityfocus.com/bid/101274
http://www.securitytracker.com/id/1039573
http://www.securitytracker.com/id/1039576
http://www.securitytracker.com/id/1039577
http://www.securitytracker.com/id/1039578
http://www.securitytracker.com/id/1039581
http://www.securitytracker.com/id/1039585
http://www.ubuntu.com/usn/USN-3455-1
https://access.redhat.com/security/vulnerabilities/kracks
https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
https://cert.vde.com/en-us/advisories/vde-2017-005
https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc
https://security.gentoo.org/glsa/201711-03
https://source.android.com/security/bulletin/2017-11-01
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us
https://support.lenovo.com/us/en/product_security/LEN-17420
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
https://www.krackattacks.com/
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
http://www.debian.org/security/2017/dsa-3999
http://www.kb.cert.org/vuls/id/228519
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
http://www.securityfocus.com/bid/101274
http://www.securitytracker.com/id/1039573
http://www.securitytracker.com/id/1039576
http://www.securitytracker.com/id/1039577
http://www.securitytracker.com/id/1039578
http://www.securitytracker.com/id/1039581
http://www.securitytracker.com/id/1039585
http://www.ubuntu.com/usn/USN-3455-1
https://access.redhat.com/security/vulnerabilities/kracks
https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
https://cert.vde.com/en-us/advisories/vde-2017-005
https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc
https://security.gentoo.org/glsa/201711-03
https://source.android.com/security/bulletin/2017-11-01
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us
https://support.lenovo.com/us/en/product_security/LEN-17420
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
https://www.krackattacks.com/