CVE-2017-13082: canonical ubuntu_linux Reusing a Nonce, Key Pair in Encryption
Vulnerability summary
CVE-2017-13082 is a high (CVSS 8.1) Reusing a Nonce, Key Pair in Encryption vulnerability in canonical ubuntu_linux. EPSS estimates a 4.58% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 12 · Related 8Timeline
- 17-10-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated8.1HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
4.58%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.58% on 05-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundKrackattacks Test Ap Ft
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse4 products
- linux_enterprise_desktop12:sp2 | 12:sp3
- linux_enterprise_point_of_sale11:sp3
- linux_enterprise_server11:sp3 | 11:sp4 | 12
- openstack_cloud6
Alpine2 products
- hostapd< 2.6-r2 | < 2.6-r1
- wpa_supplicant< 2.6-r7 | < 2.6-r2 | < 2.6-r4
Debian2 products
- wpa< 2:2.4-1.1
- debian_linuxEOL8.0 | 9.0
Redhat2 products
W1.fi2 products
- hostapd0.2.4 | 0.2.5 | 0.2.6 | 0.2.8 | 0.3.7 | 0.3.9 | 0.3.10 | 0.3.11 | 0.4.7 | 0.4.8 | 0.4.9 | 0.4.10 | 0.4.11 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.6.8 | 0.6.9 | 0.6.10 | 0.7.3 | 1.0 | 1.1 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6
- wpa_supplicant0.2.4 | 0.2.5 | 0.2.6 | 0.2.7 | 0.2.8 | 0.3.7 | 0.3.8 | 0.3.9 | 0.3.10 | 0.3.11 | 0.4.7 | 0.4.8 | 0.4.9 | 0.4.10 | 0.4.11 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.6.8 | 0.6.9 | 0.6.10 | 0.7.3 | 1.0 | 1.1 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 17.04
Freebsd1 product
- freebsdEOL10 | 10.4 | 11 | 11.1
Opensuse1 product
- leapEOL42.2 | 42.3
Ubuntu1 product
- wpa< 2.1-0ubuntu1.5 | < 2.4-0ubuntu6.2
Wi-fi alliance1 product
- wi-fi protected access (wpa and wpa2)WPA | WPA2
10 vendors · 17 products
References
31 links- rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697X Refsource CONFIRM
- www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlX Refsource CONFIRM
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpaVendor AdvisoryX Refsource CISCOThird Party Advisory
- w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txtX Refsource MISCThird Party AdvisoryREPORT
Show all 31 references
- ics-cert.us-cert.gov/advisories/ICSA-17-299-02X Refsource MISC
- source.android.com/security/bulletin/2017-11-01X Refsource CONFIRM
- security.freebsd.org/advisories/FreeBSD-SA-17:07.wpa.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
- www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlX Refsource CONFIRM
- cert-portal.siemens.com/productcert/pdf/ssa-901333.pdfX Refsource CONFIRM
- cert.vde.com/en-us/advisories/vde-2017-005X Refsource CONFIRM