CVE-2017-13086

EUVD-2017-4604
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.04
debiandebian_linux
8.0
debiandebian_linux
9.0
freebsdfreebsd
*
freebsdfreebsd
10.4
freebsdfreebsd
11.1
opensuseleap
42.2
opensuseleap
42.3
w1.fihostapd
0.2.4
w1.fihostapd
0.2.5
w1.fihostapd
0.2.6
w1.fihostapd
0.2.8
w1.fihostapd
0.3.7
w1.fihostapd
0.3.9
w1.fihostapd
0.3.10
w1.fihostapd
0.3.11
w1.fihostapd
0.4.7
w1.fihostapd
0.4.8
w1.fihostapd
0.4.9
w1.fihostapd
0.4.10
w1.fihostapd
0.4.11
w1.fihostapd
0.5.7
w1.fihostapd
0.5.8
w1.fihostapd
0.5.9
w1.fihostapd
0.5.10
w1.fihostapd
0.5.11
w1.fihostapd
0.6.8
w1.fihostapd
0.6.9
w1.fihostapd
0.6.10
w1.fihostapd
0.7.3
w1.fihostapd
1.0
w1.fihostapd
1.1
w1.fihostapd
2.0
w1.fihostapd
2.1
w1.fihostapd
2.2
w1.fihostapd
2.3
w1.fihostapd
2.4
w1.fihostapd
2.5
w1.fihostapd
2.6
w1.fiwpa_supplicant
0.2.4
w1.fiwpa_supplicant
0.2.5
w1.fiwpa_supplicant
0.2.6
w1.fiwpa_supplicant
0.2.7
w1.fiwpa_supplicant
0.2.8
w1.fiwpa_supplicant
0.3.7
w1.fiwpa_supplicant
0.3.8
w1.fiwpa_supplicant
0.3.9
w1.fiwpa_supplicant
0.3.10
w1.fiwpa_supplicant
0.3.11
w1.fiwpa_supplicant
0.4.7
w1.fiwpa_supplicant
0.4.8
w1.fiwpa_supplicant
0.4.9
w1.fiwpa_supplicant
0.4.10
w1.fiwpa_supplicant
0.4.11
w1.fiwpa_supplicant
0.5.7
w1.fiwpa_supplicant
0.5.8
w1.fiwpa_supplicant
0.5.9
w1.fiwpa_supplicant
0.5.10
w1.fiwpa_supplicant
0.5.11
w1.fiwpa_supplicant
0.6.8
w1.fiwpa_supplicant
0.6.9
w1.fiwpa_supplicant
0.6.10
w1.fiwpa_supplicant
0.7.3
w1.fiwpa_supplicant
1.0
w1.fiwpa_supplicant
1.1
w1.fiwpa_supplicant
2.0
w1.fiwpa_supplicant
2.1
w1.fiwpa_supplicant
2.2
w1.fiwpa_supplicant
2.3
w1.fiwpa_supplicant
2.4
w1.fiwpa_supplicant
2.5
w1.fiwpa_supplicant
2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wpa
bookworm
2:2.10-12+deb12u2
fixed
bookworm (security)
2:2.10-12+deb12u2
fixed
bullseye
2:2.9.0-21+deb11u2
fixed
bullseye (security)
2:2.9.0-21+deb11u2
fixed
sid
2:2.10-22
fixed
trixie
2:2.10-22
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wpa
trusty
Fixed 2.1-0ubuntu1.5
released
xenial
Fixed 2.4-0ubuntu6.2
released
zesty
Fixed 2.4-0ubuntu9.1
released
References