CVE-2017-13082

Published: Oct 17, 2017Modified: May 13, 2026

8.1

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Affected (85)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Freebsd: Freebsd · +4 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Freebsd: Freebsd · Opensuse: Leap · Redhat: Enterprise Linux Desktop, Enterprise Linux Server · W1.fi: Hostapd, Wpa Supplicant · Suse: Linux Enterprise Desktop, Linux Enterprise Point Of Sale, Linux Enterprise Server, Openstack Cloud

1 product

1 product

1 product

1 product

2 products

Enterprise Linux Desktop

Enterprise Linux Server

2 products

4 products

Linux Enterprise Desktop

Linux Enterprise Point Of Sale

Linux Enterprise Server

Openstack Cloud

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 17.04
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0
Freebsd Freebsd	All versions
Freebsd Freebsd	Version 10.4
Freebsd Freebsd	Version 10
Freebsd Freebsd	Version 11.1
Freebsd Freebsd	Version 11
Opensuse Leap	Version 42.2
Opensuse Leap	Version 42.3
Redhat Enterprise Linux Desktop	Version 7
Redhat Enterprise Linux Server	Version 7

Configuration B

64 vulnerable

Vulnerable Software	Affected Versions
W1.fi Hostapd	Version 0.2.4
W1.fi Hostapd	Version 0.2.5
W1.fi Hostapd	Version 0.2.6
W1.fi Hostapd	Version 0.2.8
W1.fi Hostapd	Version 0.3.10
W1.fi Hostapd	Version 0.3.11
W1.fi Hostapd	Version 0.3.7
W1.fi Hostapd	Version 0.3.9
W1.fi Hostapd	Version 0.4.10
W1.fi Hostapd	Version 0.4.11
W1.fi Hostapd	Version 0.4.7
W1.fi Hostapd	Version 0.4.8
W1.fi Hostapd	Version 0.4.9
W1.fi Hostapd	Version 0.5.10
W1.fi Hostapd	Version 0.5.11
W1.fi Hostapd	Version 0.5.7
W1.fi Hostapd	Version 0.5.8
W1.fi Hostapd	Version 0.5.9
W1.fi Hostapd	Version 0.6.10
W1.fi Hostapd	Version 0.6.8
W1.fi Hostapd	Version 0.6.9
W1.fi Hostapd	Version 0.7.3
W1.fi Hostapd	Version 1.0
W1.fi Hostapd	Version 1.1
W1.fi Hostapd	Version 2.0
W1.fi Hostapd	Version 2.1
W1.fi Hostapd	Version 2.2
W1.fi Hostapd	Version 2.3
W1.fi Hostapd	Version 2.4
W1.fi Hostapd	Version 2.5
W1.fi Hostapd	Version 2.6
W1.fi Wpa Supplicant	Version 0.2.4
W1.fi Wpa Supplicant	Version 0.2.5
W1.fi Wpa Supplicant	Version 0.2.6
W1.fi Wpa Supplicant	Version 0.2.7
W1.fi Wpa Supplicant	Version 0.2.8
W1.fi Wpa Supplicant	Version 0.3.10
W1.fi Wpa Supplicant	Version 0.3.11
W1.fi Wpa Supplicant	Version 0.3.7
W1.fi Wpa Supplicant	Version 0.3.8
W1.fi Wpa Supplicant	Version 0.3.9
W1.fi Wpa Supplicant	Version 0.4.10
W1.fi Wpa Supplicant	Version 0.4.11
W1.fi Wpa Supplicant	Version 0.4.7
W1.fi Wpa Supplicant	Version 0.4.8
W1.fi Wpa Supplicant	Version 0.4.9
W1.fi Wpa Supplicant	Version 0.5.10
W1.fi Wpa Supplicant	Version 0.5.11
W1.fi Wpa Supplicant	Version 0.5.7
W1.fi Wpa Supplicant	Version 0.5.8
W1.fi Wpa Supplicant	Version 0.5.9
W1.fi Wpa Supplicant	Version 0.6.10
W1.fi Wpa Supplicant	Version 0.6.8
W1.fi Wpa Supplicant	Version 0.6.9
W1.fi Wpa Supplicant	Version 0.7.3
W1.fi Wpa Supplicant	Version 1.0
W1.fi Wpa Supplicant	Version 1.1
W1.fi Wpa Supplicant	Version 2.0
W1.fi Wpa Supplicant	Version 2.1
W1.fi Wpa Supplicant	Version 2.2
W1.fi Wpa Supplicant	Version 2.3
W1.fi Wpa Supplicant	Version 2.4
W1.fi Wpa Supplicant	Version 2.5
W1.fi Wpa Supplicant	Version 2.6

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 12 sp2
Suse Linux Enterprise Desktop	Version 12 sp3
Suse Linux Enterprise Point Of Sale	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12
Suse Openstack Cloud	Version 6

Related CWEs

CWE-323

Reusing a Nonce, Key Pair in Encryption

Nonces should be used for the present occasion and only once.

CWE-330

Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (52)

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html

Source: cret@cert.org

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt

Source: cret@cert.org

Third Party Advisory

http://www.debian.org/security/2017/dsa-3999

Source: cret@cert.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/228519

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Source: cret@cert.org

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Source: cret@cert.org

http://www.securityfocus.com/bid/101274

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039570

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039571

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039573

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039581

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3455-1

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2907

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/security/vulnerabilities/kracks

Source: cret@cert.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf

Source: cret@cert.org

https://cert.vde.com/en-us/advisories/vde-2017-005

Source: cret@cert.org

https://github.com/vanhoefm/krackattacks-test-ap-ft

Source: cret@cert.org

ExploitThird Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-17-299-02

Source: cret@cert.org

https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697

Source: cret@cert.org

https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc

Source: cret@cert.org

Third Party Advisory

https://security.gentoo.org/glsa/201711-03

Source: cret@cert.org

https://source.android.com/security/bulletin/2017-11-01

Source: cret@cert.org

https://support.lenovo.com/us/en/product_security/LEN-17420

Source: cret@cert.org

Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

Source: cret@cert.org

Third Party Advisory

https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt

Source: cret@cert.org

Third Party Advisory

https://www.krackattacks.com/

Source: cret@cert.org

Technical DescriptionThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html