Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
appleAppleAPPLE:HT208258
HistoryDec 12, 2017 - 9:19 a.m.

About the security content of AirPort Base Station Firmware Update 7.6.9 - Apple Support

2017-12-1209:19:14
support.apple.com
23

EPSS

0.004

Percentile

74.4%

JSON

About Apple security updates

For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.

For more information about security, see the Apple Product Security page. You can encrypt communications with Apple using the Apple Product Security PGP Key.

Apple security documents reference vulnerabilities by CVE-ID when possible.

AirPort Base Station Firmware Update 7.6.9

Released December 12, 2017

AirPort Base Station Firmware

Available for: AirPort Express, AirPort Extreme, and AirPort Time Capsule base stations with 802.11n

Impact: An attacker in Wi-Fi range may force nonce reuse in WPA unicast/PTK clients (Key Reinstallation Attacks - KRACK)

Description: A logic issue existed in the handling of state transitions. This was addressed with improved state management.

CVE-2017-13077: Mathy Vanhoef of the imec-DistriNet group at KU Leuven

CVE-2017-13078: Mathy Vanhoef of the imec-DistriNet group at KU Leuven

AirPort Base Station Firmware

Available for: AirPort Express, AirPort Extreme, and AirPort Time Capsule base stations with 802.11n

Impact: An attacker in Wi-Fi range may force nonce reuse in WPA multicast/GTK clients (Key Reinstallation Attacks - KRACK)

Description: A logic issue existed in the handling of state transitions. This was addressed with improved state management.

CVE-2017-13080: Mathy Vanhoef of the imec-DistriNet group at KU Leuven

Related

openvas 37
apple 7
ics 11
nessus 48
centos 2
redhat 2
hp 4
mageia 2
oraclelinux 2
ibm 1
osv 6
archlinux 2
fedora 6
debian 3
nvd 3
ubuntucve 3
alpinelinux 3
redhatcve 3
prion 3
veracode 3
mskb 2
cve 3
nvidia 1
debiancve 3
freebsd_advisory 1
cvelist 3
kaspersky 2
hackerone 1
slackware 1
fortinet 1
msrc 1
mscve 1
threatpost 1
gentoo 1
freebsd 1
huawei 1
myhack58 1
intel 2
cisco 1
thn 1
f5 1
suse 12
lenovo 2
ubuntu 2
cert 1
cloudfoundry 1
openvas
openvas
Intel Active Management Technology WPA2 Key Reinstallation Vulnerabilities - KRACK (INTEL-SA-00101)
2017-10-19 00:00:00
CentOS Update for wpa_supplicant CESA-2017:2911 centos6
2017-10-20 00:00:00
RedHat Update for wpa_supplicant RHSA-2017:2911-01
2017-10-20 00:00:00
apple
apple
About the security content of Wi-Fi Update for Boot Camp 6.4.0
2018-07-05 00:00:00
About the security content of AirPort Base Station Firmware Update 7.6.9
2017-12-12 00:00:00
About the security content of Wi-Fi Update for Boot Camp 6.4.0 - Apple Support
2018-07-05 10:02:49
ics
ics
PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol
2017-11-21 12:00:00
BD Pyxis
2018-04-24 12:00:00
PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol
2017-12-19 12:00:00
nessus
nessus
Virtuozzo 6 : wpa_supplicant (VZLSA-2017-2911)
2018-11-27 00:00:00
RHEL 6 : wpa_supplicant (RHSA-2017:2911) (KRACK)
2017-10-19 00:00:00
Scientific Linux Security Update : wpa_supplicant on SL6.x i386/x86_64 (20171018) (KRACK)
2017-10-19 00:00:00
centos
centos
wpa_supplicant security update
2017-10-18 16:57:30
wpa_supplicant security update
2017-10-17 21:54:54
redhat
redhat
(RHSA-2017:2911) Important: wpa_supplicant security update
2017-10-18 15:43:19
(RHSA-2017:2907) Important: wpa_supplicant security update
2017-10-17 20:14:23
hp
hp
HPSBPI03574 rev. 2 - WPA, WPA2 Key Reinstallation Attacks (KRACK attacks) Potential Remote Disclosure of Information: Certain HP Enterprise Printer and MFP products, Certain HP PageWide Printer and MFP Products, HP Jetdirect Accessory Products
2018-01-12 00:00:00
HP Printing Security Advisory - KRACK Attacks Potential Vulnerabilities
2018-01-09 00:00:00
HPSBHF03571 rev. 6 - Intel Management Engine Cumulative Security update and fix for WPA2 vulnerability
2017-11-22 00:00:00
mageia
mageia
Updated nonfree firmware packages fixes security vulnerabilities
2018-07-25 11:24:17
Updated wpa_supplicant and hostapd packages fix security vulnerabilities
2017-10-19 21:14:02
oraclelinux
oraclelinux
wpa_supplicant security update
2017-10-18 00:00:00
wpa_supplicant security update
2017-10-17 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in wpa_supplicant affect PowerKVM (KRACK)
2018-06-18 01:39:24
osv
osv
firmware-nonfree - security update
2018-11-10 00:00:00
wpa - security update
2017-10-31 00:00:00
wpa - security update
2017-10-16 00:00:00
archlinux
archlinux
[ASA-201710-22] wpa_supplicant: man-in-the-middle
2017-10-16 00:00:00
[ASA-201710-23] hostapd: man-in-the-middle
2017-10-16 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: wpa_supplicant-2.6-11.fc26
2017-10-16 17:59:17
[SECURITY] Fedora 27 Update: wpa_supplicant-2.6-11.fc27
2017-10-17 00:20:50
[SECURITY] Fedora 25 Update: wpa_supplicant-2.6-3.fc25.1
2017-10-17 02:21:04
debian
debian
[SECURITY] [DLA 1573-1] firmware-nonfree security update
2018-11-13 01:33:10
[SECURITY] [DSA 3999-1] wpa security update
2017-10-16 09:20:15
[SECURITY] [DLA 1150-1] wpa security update
2017-10-31 14:48:26
nvd
nvd
CVE-2017-13077
2017-10-17 02:29:00
CVE-2017-13078
2017-10-17 13:29:00
CVE-2017-13080
2017-10-17 13:29:00
ubuntucve
ubuntucve
CVE-2017-13077
2017-10-16 00:00:00
CVE-2017-13078
2017-10-16 00:00:00
CVE-2017-13080
2017-10-16 00:00:00
alpinelinux
alpinelinux
CVE-2017-13077
2017-10-17 02:29:00
CVE-2017-13078
2017-10-17 13:29:00
CVE-2017-13080
2017-10-17 13:29:00
redhatcve
redhatcve
CVE-2017-13078
2017-10-16 09:50:51
CVE-2017-13080
2019-10-09 16:30:50
CVE-2017-13077
2019-10-08 10:15:50
prion
prion
Authentication flaw
2017-10-17 13:29:00
Design/Logic Flaw
2017-10-17 02:29:00
Authentication flaw
2017-10-17 13:29:00
veracode
veracode
Key Reinstallation Attack (KRACK)
2019-05-16 01:48:06
Key Reinstallation Attack (KRACK)
2019-01-15 09:19:52
Key Reinstallation Attack (KRACK)
2019-05-16 01:48:06
mskb
mskb
Description of the security update for the Windows Wireless WPA pairwise encryption key reinstallation vulnerability in WES09 and POSReady 2009: March 13, 2018
2018-03-12 00:00:00
Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017
2017-10-16 07:00:00
cve
cve
CVE-2017-13077
2017-10-17 02:29:00
CVE-2017-13078
2017-10-17 13:29:00
CVE-2017-13080
2017-10-17 13:29:00
nvidia
nvidia
Security Bulletin: NVIDIA Linux for Tegra (L4T) “KRACK” vulnerabilities
2017-12-20 00:00:00
debiancve
debiancve
CVE-2017-13077
2017-10-17 02:29:00
CVE-2017-13078
2017-10-17 13:29:00
CVE-2017-13080
2017-10-17 13:29:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:07.wpa
2017-10-17 00:00:00
cvelist
cvelist
CVE-2017-13078
2017-10-17 13:00:00
CVE-2017-13077
2017-10-17 02:00:00
CVE-2017-13080
2017-10-17 13:00:00
kaspersky
kaspersky
KLA11852 Security UI vulnerability in Microsoft Products (ESU)
2017-10-16 00:00:00
KLA11851 Security UI vulnerability in Microsoft Windows
2017-10-16 00:00:00
hackerone
hackerone
Internet Bug Bounty: Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuse
2017-11-02 22:08:43
slackware
slackware
[slackware-security] wpa_supplicant
2017-10-18 19:36:09
fortinet
fortinet
Key Reinstallation Attacks: Cryptographic/protocol attack against WPA2
2017-10-16 00:00:00
msrc
msrc
2017 年 10 月のセキュリティ更新プログラム (月例)
2017-10-10 07:00:00
mscve
mscve
Windows Wireless WPA Group Key Reinstallation Vulnerability
2017-10-16 07:00:00
threatpost
threatpost
Apple Patches KRACK Vulnerability in iOS 11.1
2017-10-31 15:12:18
gentoo
gentoo
hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks
2017-11-10 00:00:00
freebsd
freebsd
WPA packet number reuse with replayed messages and key reinstallation
2017-10-16 00:00:00
huawei
huawei
Security Advisory - Multiple Vulnerabilities of WPA and WPA2 Protocol in Some Huawei Products
2017-11-17 00:00:00
myhack58
myhack58
KRACK: WPA2 series of vulnerabilities in the event of early warning-vulnerability warning-the black bar safety net
2017-10-18 00:00:00
intel
intel
One or more Intel Products affected by the Wi-Fi Protected Access II (WPA2) protocol vulnerability
2017-12-07 00:00:00
Frame replay vulnerability in Wi-Fi subsystem in Intel® Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle
2017-12-07 00:00:00
cisco
cisco
Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
2017-10-16 14:00:00
thn
thn
KRACK Demo: Critical Key Reinstallation Attack Against Widely-Used WPA2 Wi-Fi Protocol
2017-10-15 23:21:00
f5
f5
K23642330 : Multiple WPA2 vulnerabilities (KRACK)
2017-10-17 00:00:00
suse
suse
Security update for wpa_supplicant (important)
2017-10-17 21:07:43
Security update for wpa_supplicant (important)
2017-10-18 15:07:12
Security update for wpa_supplicant (important)
2017-10-17 18:11:19
lenovo
lenovo
WPA2 Protocol Vulnerabilities - US
2018-12-18 15:12:07
WPA2 Protocol Vulnerabilities - Lenovo Support US
2018-12-18 15:12:07
ubuntu
ubuntu
wpa_supplicant and hostapd vulnerabilities
2017-10-16 00:00:00
Linux firmware vulnerabilities
2017-12-06 00:00:00
cert
cert
Wi-Fi Protected Access (WPA) handshake traffic can be manipulated to induce nonce and session key reuse
2017-10-16 00:00:00
cloudfoundry
cloudfoundry
USN-3505-1: Linux firmware vulnerabilities | Cloud Foundry
2017-12-14 00:00:00

EPSS

0.004

Percentile

74.4%

JSON
Related for APPLE:HT208258
openvas37apple7ics11nessus48centos2redhat2hp4mageia2oraclelinux2ibm1osv6archlinux2fedora6debian3nvd3ubuntucve3alpinelinux3redhatcve3prion3veracode3mskb2cve3nvidia1debiancve3freebsd_advisory1cvelist3kaspersky2hackerone1slackware1fortinet1msrc1mscve1threatpost1gentoo1freebsd1huawei1myhack581intel2cisco1thn1f51suse12lenovo2ubuntu2cert1cloudfoundry1