CVE-2017-13081

EUVD-2017-4599
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.04
debiandebian_linux
8.0
debiandebian_linux
9.0
freebsdfreebsd
*
freebsdfreebsd
10.4
freebsdfreebsd
11.1
opensuseleap
42.2
opensuseleap
42.3
w1.fihostapd
0.2.4
w1.fihostapd
0.2.5
w1.fihostapd
0.2.6
w1.fihostapd
0.2.8
w1.fihostapd
0.3.7
w1.fihostapd
0.3.9
w1.fihostapd
0.3.10
w1.fihostapd
0.3.11
w1.fihostapd
0.4.7
w1.fihostapd
0.4.8
w1.fihostapd
0.4.9
w1.fihostapd
0.4.10
w1.fihostapd
0.4.11
w1.fihostapd
0.5.7
w1.fihostapd
0.5.8
w1.fihostapd
0.5.9
w1.fihostapd
0.5.10
w1.fihostapd
0.5.11
w1.fihostapd
0.6.8
w1.fihostapd
0.6.9
w1.fihostapd
0.6.10
w1.fihostapd
0.7.3
w1.fihostapd
1.0
w1.fihostapd
1.1
w1.fihostapd
2.0
w1.fihostapd
2.1
w1.fihostapd
2.2
w1.fihostapd
2.3
w1.fihostapd
2.4
w1.fihostapd
2.5
w1.fihostapd
2.6
w1.fiwpa_supplicant
0.2.4
w1.fiwpa_supplicant
0.2.5
w1.fiwpa_supplicant
0.2.6
w1.fiwpa_supplicant
0.2.7
w1.fiwpa_supplicant
0.2.8
w1.fiwpa_supplicant
0.3.7
w1.fiwpa_supplicant
0.3.8
w1.fiwpa_supplicant
0.3.9
w1.fiwpa_supplicant
0.3.10
w1.fiwpa_supplicant
0.3.11
w1.fiwpa_supplicant
0.4.7
w1.fiwpa_supplicant
0.4.8
w1.fiwpa_supplicant
0.4.9
w1.fiwpa_supplicant
0.4.10
w1.fiwpa_supplicant
0.4.11
w1.fiwpa_supplicant
0.5.7
w1.fiwpa_supplicant
0.5.8
w1.fiwpa_supplicant
0.5.9
w1.fiwpa_supplicant
0.5.10
w1.fiwpa_supplicant
0.5.11
w1.fiwpa_supplicant
0.6.8
w1.fiwpa_supplicant
0.6.9
w1.fiwpa_supplicant
0.6.10
w1.fiwpa_supplicant
0.7.3
w1.fiwpa_supplicant
1.0
w1.fiwpa_supplicant
1.1
w1.fiwpa_supplicant
2.0
w1.fiwpa_supplicant
2.1
w1.fiwpa_supplicant
2.2
w1.fiwpa_supplicant
2.3
w1.fiwpa_supplicant
2.4
w1.fiwpa_supplicant
2.5
w1.fiwpa_supplicant
2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firmware-nonfree
bookworm/non-free-firmware
20230210-5
fixed
bullseye/non-free
20210315-3
fixed
jessie
no-dsa
sid/non-free-firmware
20240909-2
fixed
trixie/non-free-firmware
20240909-2
fixed
wpa
bookworm
2:2.10-12+deb12u2
fixed
bookworm (security)
2:2.10-12+deb12u2
fixed
bullseye
2:2.9.0-21+deb11u2
fixed
bullseye (security)
2:2.9.0-21+deb11u2
fixed
jessie
no-dsa
sid
2:2.10-22
fixed
trixie
2:2.10-22
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux-firmware
artful
Fixed 1.169.1
released
bionic
Fixed 1.170
released
cosmic
Fixed 1.170
released
disco
Fixed 1.170
released
eoan
Fixed 1.170
released
focal
Fixed 1.170
released
groovy
Fixed 1.170
released
hirsute
Fixed 1.170
released
trusty
Fixed 1.127.24
released
xenial
Fixed 1.157.14
released
zesty
Fixed 1.164.2
released
wpa
artful
Fixed 2.4-0ubuntu10
released
bionic
Fixed 2.4-0ubuntu10
released
cosmic
Fixed 2.4-0ubuntu10
released
disco
Fixed 2.4-0ubuntu10
released
eoan
Fixed 2.4-0ubuntu10
released
focal
Fixed 2.4-0ubuntu10
released
groovy
Fixed 2.4-0ubuntu10
released
hirsute
Fixed 2.4-0ubuntu10
released
trusty
Fixed 2.1-0ubuntu1.5
released
xenial
Fixed 2.4-0ubuntu6.2
released
zesty
Fixed 2.4-0ubuntu9.1
released
References