CVE-2017-13084 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, d...
MediumCVSS 6.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wpa(Debian:12) | All versions | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-12 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-12+deb12u1 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-12+deb12u2 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-12+deb12u3 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-13 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-14 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-15 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-16 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-17 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-18 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-20 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-21 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-21.1 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-22 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-23 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-24 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.10-25 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.11-1 | No fix listed |
| debian/wpa(Debian:12) | = 2:2.11-2 | No fix listed |
| debian/wpa(Debian:13) | All versions | No fix listed |
| debian/wpa(Debian:13) | = 2:2.10-24 | No fix listed |
| debian/wpa(Debian:13) | = 2:2.10-25 | No fix listed |
| debian/wpa(Debian:13) | = 2:2.11-1 | No fix listed |
| debian/wpa(Debian:13) | = 2:2.11-2 | No fix listed |
Show 92 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wpa(Debian:14) | All versions | No fix listed |
| debian/wpa(Debian:14) | = 2:2.10-24 | No fix listed |
| debian/wpa(Debian:14) | = 2:2.10-25 | No fix listed |
| debian/wpa(Debian:14) | = 2:2.11-1 | No fix listed |
| debian/wpa(Debian:14) | = 2:2.11-2 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| freebsd | All versions | No fix listed |
| freebsd | = 10 | No fix listed |
| freebsd | = 10.4 | No fix listed |
| freebsd | = 11 | No fix listed |
| freebsd | = 11.1 | No fix listed |
| openSUSE leap | = 42.2 | No fix listed |
| openSUSE leap | = 42.3 | No fix listed |
| redhat enterprise linux desktop | = 7 | No fix listed |
| redhat enterprise linux server | = 7 | No fix listed |
| w1.fi hostapd | = 0.2.4 | No fix listed |
| w1.fi hostapd | = 0.2.5 | No fix listed |
| w1.fi hostapd | = 0.2.6 | No fix listed |
| w1.fi hostapd | = 0.2.8 | No fix listed |
| w1.fi hostapd | = 0.3.7 | No fix listed |
| w1.fi hostapd | = 0.3.9 | No fix listed |
| w1.fi hostapd | = 0.3.10 | No fix listed |
| w1.fi hostapd | = 0.3.11 | No fix listed |
| w1.fi hostapd | = 0.4.7 | No fix listed |
| w1.fi hostapd | = 0.4.8 | No fix listed |
| w1.fi hostapd | = 0.4.9 | No fix listed |
| w1.fi hostapd | = 0.4.10 | No fix listed |
| w1.fi hostapd | = 0.4.11 | No fix listed |
| w1.fi hostapd | = 0.5.7 | No fix listed |
| w1.fi hostapd | = 0.5.8 | No fix listed |
| w1.fi hostapd | = 0.5.9 | No fix listed |
| w1.fi hostapd | = 0.5.10 | No fix listed |
| w1.fi hostapd | = 0.5.11 | No fix listed |
| w1.fi hostapd | = 0.6.8 | No fix listed |
| w1.fi hostapd | = 0.6.9 | No fix listed |
| w1.fi hostapd | = 0.6.10 | No fix listed |
| w1.fi hostapd | = 0.7.3 | No fix listed |
| w1.fi hostapd | = 1.0 | No fix listed |
| w1.fi hostapd | = 1.1 | No fix listed |
| w1.fi hostapd | = 2.0 | No fix listed |
| w1.fi hostapd | = 2.1 | No fix listed |
| w1.fi hostapd | = 2.2 | No fix listed |
| w1.fi hostapd | = 2.3 | No fix listed |
| w1.fi hostapd | = 2.4 | No fix listed |
| w1.fi hostapd | = 2.5 | No fix listed |
| w1.fi hostapd | = 2.6 | No fix listed |
| w1.fi wpa supplicant | = 0.2.4 | No fix listed |
| w1.fi wpa supplicant | = 0.2.5 | No fix listed |
| w1.fi wpa supplicant | = 0.2.6 | No fix listed |
| w1.fi wpa supplicant | = 0.2.7 | No fix listed |
| w1.fi wpa supplicant | = 0.2.8 | No fix listed |
| w1.fi wpa supplicant | = 0.3.7 | No fix listed |
| w1.fi wpa supplicant | = 0.3.8 | No fix listed |
| w1.fi wpa supplicant | = 0.3.9 | No fix listed |
| w1.fi wpa supplicant | = 0.3.10 | No fix listed |
| w1.fi wpa supplicant | = 0.3.11 | No fix listed |
| w1.fi wpa supplicant | = 0.4.7 | No fix listed |
| w1.fi wpa supplicant | = 0.4.8 | No fix listed |
| w1.fi wpa supplicant | = 0.4.9 | No fix listed |
| w1.fi wpa supplicant | = 0.4.10 | No fix listed |
| w1.fi wpa supplicant | = 0.4.11 | No fix listed |
| w1.fi wpa supplicant | = 0.5.7 | No fix listed |
| w1.fi wpa supplicant | = 0.5.8 | No fix listed |
| w1.fi wpa supplicant | = 0.5.9 | No fix listed |
| w1.fi wpa supplicant | = 0.5.10 | No fix listed |
| w1.fi wpa supplicant | = 0.5.11 | No fix listed |
| w1.fi wpa supplicant | = 0.6.8 | No fix listed |
| w1.fi wpa supplicant | = 0.6.9 | No fix listed |
| w1.fi wpa supplicant | = 0.6.10 | No fix listed |
| w1.fi wpa supplicant | = 0.7.3 | No fix listed |
| w1.fi wpa supplicant | = 1.0 | No fix listed |
| w1.fi wpa supplicant | = 1.1 | No fix listed |
| w1.fi wpa supplicant | = 2.0 | No fix listed |
| w1.fi wpa supplicant | = 2.1 | No fix listed |
| w1.fi wpa supplicant | = 2.2 | No fix listed |
| w1.fi wpa supplicant | = 2.3 | No fix listed |
| w1.fi wpa supplicant | = 2.4 | No fix listed |
| w1.fi wpa supplicant | = 2.5 | No fix listed |
| w1.fi wpa supplicant | = 2.6 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp2 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp3 | No fix listed |
| SUSE linux enterprise point of sale | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE openstack cloud | = 6 | No fix listed |
| Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) | = WPA | No fix listed |
| Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) | = WPA2 | No fix listed |
References
- Debian Security Tracker CVE-2017-13084 vendor-advisory
- www.arubanetworks.com third-party-advisory
- VU#228519 third-party-advisory us-government-resource
- 101274 third-party-advisory vdb-entry
- 1039576 third-party-advisory vdb-entry
- 1039577 third-party-advisory vdb-entry
- 1039581 third-party-advisory vdb-entry
- access.redhat.com third-party-advisory
- cert-portal.siemens.com
- GLSA-201711-03 vendor-advisory
- support.lenovo.com third-party-advisory
- 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II third-party-advisory vendor-advisory
- w1.fi third-party-advisory
- www.krackattacks.com technical-description third-party-advisory