CVE-2017-13086

Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 17 Oct 2017, 13:00
Last modified:05 Aug 2024, 18:58

Vulnerability Summary

Overall Risk (default)
medium
27/100
CVSS Score
6.8 MEDIUM
v3.0 (nvd)
EPSS Score
0.46% LOW
0% probability +0.17%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Oct 2017, 13:00
Published
Vulnerability first disclosed
05 Aug 2024, 18:58
Last Modified
Vulnerability information updated

Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

CVSS Metrics

  • v3.0•MEDIUM•Score: 6.8CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
  • v2.0•MEDIUM•Score: 5.4AV:A/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.46%• Percentile: 65%

Techniques & Countermeasures

  • CWE-323•Reusing a Nonce, Key Pair in Encryption

    Nonces should be used for the present occasion and only once.

  • CWE-330•Use of Insufficiently Random Values

    The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 17.04

  • debian•debian_linux

    8.0 | 9.0

  • freebsd•freebsd

    10 | 10.4 | 11 | 11.1

  • opensuse•leap

    42.2 | 42.3

  • redhat•enterprise_linux_desktop

    7

  • redhat•enterprise_linux_server

    7

  • suse•linux_enterprise_desktop

    12:sp2 | 12:sp3

  • suse•linux_enterprise_point_of_sale

    11:sp3

  • suse•linux_enterprise_server

    11:sp3 | 11:sp4 | 12

  • suse•openstack_cloud

    6

  • w1.fi•hostapd

    0.2.4 | 0.2.5 | 0.2.6 | 0.2.8 | 0.3.7 | 0.3.9 | 0.3.10 | 0.3.11 | 0.4.7 | 0.4.8 | 0.4.9 | 0.4.10 | 0.4.11 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.6.8 | 0.6.9 | 0.6.10 | 0.7.3 | 1.0 | 1.1 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6

  • w1.fi•wpa_supplicant

    0.2.4 | 0.2.5 | 0.2.6 | 0.2.7 | 0.2.8 | 0.3.7 | 0.3.8 | 0.3.9 | 0.3.10 | 0.3.11 | 0.4.7 | 0.4.8 | 0.4.9 | 0.4.10 | 0.4.11 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.6.8 | 0.6.9 | 0.6.10 | 0.7.3 | 1.0 | 1.1 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6

  • wi-fi alliance•wi-fi protected access (wpa and wpa2)

    WPA | WPA2

References (21)