CVE-2017-13080 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points....
MediumCVSS 5.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firmware-nonfree(Debian:12) | < 20180825-1 | 20180825-1 |
| debian/firmware-nonfree(Debian:12) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.24~bpo50+1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firmware-nonfree(Debian:12) | = 0.25 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.26 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.27 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.27~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.28 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.28+squeeze1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.29 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.3 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.30 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.31 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.32 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.32~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.33 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.34 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.35 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.35~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36+wheezy.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36+wheezy.1~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.37 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.38 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.38~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.39 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.39~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4+etchnhalf.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.40 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.40~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.41 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.41~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.42 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.43 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.43~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.44 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.44~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4etch1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.5 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.6 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.7 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.8 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.9 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151207-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151207-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160110-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160110-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160824-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160824-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-3 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-3~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-4 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-4~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-5 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-5~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20170823-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20170823-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20180518-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20180518-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | < 20180825-1 | 20180825-1 |
| debian/firmware-nonfree(Debian:13) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.24~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.25 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.26 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.27 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.27~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.28 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.28+squeeze1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.29 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.3 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.30 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.31 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.32 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.32~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.33 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.34 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.35 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.35~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36+wheezy.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36+wheezy.1~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.37 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.38 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.38~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.39 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.39~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4+etchnhalf.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.40 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.40~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.41 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.41~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.42 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.43 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.43~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.44 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.44~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4etch1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.5 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.6 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.7 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.8 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.9 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151207-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151207-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160110-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160110-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160824-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160824-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-3 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-3~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-4 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-4~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-5 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-5~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20170823-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20170823-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20180518-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20180518-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | < 20180825-1 | 20180825-1 |
| debian/firmware-nonfree(Debian:14) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.24 | No fix listed |
References
- Debian Security Tracker CVE-2017-13080 vendor-advisory
- SUSE-SU-2017:2745 third-party-advisory vendor-advisory
- SUSE-SU-2017:2752 third-party-advisory vendor-advisory
- openSUSE-SU-2017:2755 third-party-advisory vendor-advisory
- www.arubanetworks.com third-party-advisory
- DSA-3999 third-party-advisory vendor-advisory
- VU#228519 third-party-advisory us-government-resource
- www.oracle.com
- www.oracle.com
- 101274 third-party-advisory vdb-entry
- 1039572 third-party-advisory vdb-entry
- 1039573 third-party-advisory vdb-entry
- 1039576 third-party-advisory vdb-entry
- 1039577 third-party-advisory vdb-entry
- 1039578 third-party-advisory vdb-entry
- 1039581 third-party-advisory vdb-entry
- 1039585 third-party-advisory vdb-entry
- 1039703 vdb-entry
- USN-3455-1 third-party-advisory vendor-advisory
- RHSA-2017:2907 third-party-advisory vendor-advisory
- RHSA-2017:2911 third-party-advisory vendor-advisory
- access.redhat.com third-party-advisory
- cert-portal.siemens.com
- cert.vde.com
- cert.vde.com
- [debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update mailing-list
- [debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update mailing-list
- portal.msrc.microsoft.com vendor-advisory
- FreeBSD-SA-17:07 third-party-advisory vendor-advisory
- GLSA-201711-03 vendor-advisory
- source.android.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.hpe.com
- support.lenovo.com third-party-advisory
- 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II third-party-advisory vendor-advisory
- w1.fi third-party-advisory
- www.intel.com
- www.krackattacks.com technical-description third-party-advisory
- security.alpinelinux.org vendor-advisory