CVE-2017-13080

moderate-risk

Published 2017-10-17

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

Do I need to act?

1.1% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

ADJACENT_NETWORK / HIGH complexity

Affected Products (20)

Ubuntu Linux

Debian Linux

Freebsd

Leap

Enterprise Linux Desktop

Hostapd

Affected Vendors

Suse W1.Fi Opensuse Debian Canonical Redhat Freebsd

References (86)

Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html

Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html

Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html

Third Party Advisory http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt

Third Party Advisory http://www.debian.org/security/2017/dsa-3999

Third Party Advisory http://www.kb.cert.org/vuls/id/228519

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Third Party Advisory http://www.securityfocus.com/bid/101274

Third Party Advisory http://www.securitytracker.com/id/1039572

Third Party Advisory http://www.securitytracker.com/id/1039573

Third Party Advisory http://www.securitytracker.com/id/1039576

Third Party Advisory http://www.securitytracker.com/id/1039577

Third Party Advisory http://www.securitytracker.com/id/1039578

Third Party Advisory http://www.securitytracker.com/id/1039581

Third Party Advisory http://www.securitytracker.com/id/1039585

http://www.securitytracker.com/id/1039703

Third Party Advisory http://www.ubuntu.com/usn/USN-3455-1

Third Party Advisory https://access.redhat.com/errata/RHSA-2017:2907

Third Party Advisory https://access.redhat.com/errata/RHSA-2017:2911

and 66 more references

/ 100

moderate-risk

Severity 14/34 · Moderate

Exploitability 3/34 · Minimal

Exposure 29/34 · Critical