CVE-2017-13078 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points t...
MediumCVSS 5.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firmware-nonfree(Debian:12) | < 20180825-1 | 20180825-1 |
| debian/firmware-nonfree(Debian:12) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.24~bpo50+1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firmware-nonfree(Debian:12) | = 0.25 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.26 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.27 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.27~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.28 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.28+squeeze1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.29 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.3 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.30 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.31 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.32 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.32~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.33 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.34 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.35 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.35~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36+wheezy.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36+wheezy.1~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.37 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.38 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.38~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.39 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.39~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4+etchnhalf.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.40 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.40~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.41 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.41~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.42 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.43 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.43~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.44 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.44~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4etch1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.5 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.6 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.7 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.8 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.9 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151207-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151207-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160110-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160110-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160824-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160824-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-3 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-3~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-4 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-4~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-5 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-5~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20170823-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20170823-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20180518-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20180518-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | < 20180825-1 | 20180825-1 |
| debian/firmware-nonfree(Debian:13) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.24~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.25 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.26 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.27 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.27~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.28 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.28+squeeze1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.29 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.3 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.30 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.31 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.32 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.32~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.33 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.34 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.35 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.35~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36+wheezy.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36+wheezy.1~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.37 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.38 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.38~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.39 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.39~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4+etchnhalf.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.40 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.40~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.41 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.41~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.42 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.43 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.43~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.44 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.44~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4etch1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.5 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.6 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.7 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.8 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.9 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151207-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151207-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160110-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160110-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160824-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160824-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-3 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-3~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-4 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-4~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-5 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-5~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20170823-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20170823-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20180518-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20180518-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | < 20180825-1 | 20180825-1 |
| debian/firmware-nonfree(Debian:14) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.24 | No fix listed |
References
- Debian Security Tracker CVE-2017-13078 vendor-advisory
- SUSE-SU-2017:2745 third-party-advisory vendor-advisory
- SUSE-SU-2017:2752 third-party-advisory vendor-advisory
- openSUSE-SU-2017:2755 third-party-advisory vendor-advisory
- www.arubanetworks.com third-party-advisory
- DSA-3999 third-party-advisory vendor-advisory
- VU#228519 third-party-advisory us-government-resource
- www.oracle.com
- www.oracle.com
- 101274 third-party-advisory vdb-entry
- 1039573 third-party-advisory vdb-entry
- 1039576 third-party-advisory vdb-entry
- 1039577 third-party-advisory vdb-entry
- 1039578 third-party-advisory vdb-entry
- 1039581 third-party-advisory vdb-entry
- 1039585 third-party-advisory vdb-entry
- USN-3455-1 third-party-advisory vendor-advisory
- RHSA-2017:2907 third-party-advisory vendor-advisory
- RHSA-2017:2911 third-party-advisory vendor-advisory
- access.redhat.com third-party-advisory
- cert-portal.siemens.com
- cert.vde.com
- cert.vde.com
- [debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update mailing-list
- FreeBSD-SA-17:07 third-party-advisory vendor-advisory
- GLSA-201711-03 vendor-advisory
- source.android.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.hpe.com
- support.lenovo.com third-party-advisory
- 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II third-party-advisory vendor-advisory
- w1.fi third-party-advisory
- www.krackattacks.com technical-description third-party-advisory
- security.alpinelinux.org vendor-advisory