CVE-2017-13078

Advisory lineage Upstream: 0 Downstream: 20
Modified
Published: 17 Oct 2017, 13:00
Last modified:05 Aug 2024, 18:58

Vulnerability Summary

Overall Risk (default)
low
21/100
CVSS Score
5.3 MEDIUM
v3.0 (nvd)
EPSS Score
0.81% LOW
1% probability +0.19%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Oct 2017, 13:00
Published
Vulnerability first disclosed
05 Aug 2024, 18:58
Last Modified
Vulnerability information updated

Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.3CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
  • v2.0•LOW•Score: 2.9AV:A/AC:M/Au:N/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 0.81%• Percentile: 75%

Techniques & Countermeasures

  • CWE-323•Reusing a Nonce, Key Pair in Encryption

    Nonces should be used for the present occasion and only once.

  • CWE-330•Use of Insufficiently Random Values

    The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 17.04

  • debian•debian_linux

    8.0 | 9.0

  • freebsd•freebsd

    10 | 10.4 | 11 | 11.1

  • opensuse•leap

    42.2 | 42.3

  • redhat•enterprise_linux_desktop

    7

  • redhat•enterprise_linux_server

    7

  • suse•linux_enterprise_desktop

    12:sp2 | 12:sp3

  • suse•linux_enterprise_point_of_sale

    11:sp3

  • suse•linux_enterprise_server

    11:sp3 | 11:sp4 | 12

  • suse•openstack_cloud

    6

  • w1.fi•hostapd

    0.2.4 | 0.2.5 | 0.2.6 | 0.2.8 | 0.3.7 | 0.3.9 | 0.3.10 | 0.3.11 | 0.4.7 | 0.4.8 | 0.4.9 | 0.4.10 | 0.4.11 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.6.8 | 0.6.9 | 0.6.10 | 0.7.3 | 1.0 | 1.1 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6

  • w1.fi•wpa_supplicant

    0.2.4 | 0.2.5 | 0.2.6 | 0.2.7 | 0.2.8 | 0.3.7 | 0.3.8 | 0.3.9 | 0.3.10 | 0.3.11 | 0.4.7 | 0.4.8 | 0.4.9 | 0.4.10 | 0.4.11 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.6.8 | 0.6.9 | 0.6.10 | 0.7.3 | 1.0 | 1.1 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6

  • wi-fi alliance•wi-fi protected access (wpa and wpa2)

    WPA | WPA2

References (35)