Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-13078HistoryOct 17, 2017 - 1:29 p.m.
CVE-2017-13078
2017-10-1713:29:00
Debian Security Bug Tracker
security-tracker.debian.org
20
5.3 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
2.9 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
48.4%
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | firmware-nonfree | < 20180825-1 | firmware-nonfree_20180825-1_all.deb |
| Debian | 11 | all | firmware-nonfree | < 20180825-1 | firmware-nonfree_20180825-1_all.deb |
| Debian | 10 | all | firmware-nonfree | < 20180825-1 | firmware-nonfree_20180825-1_all.deb |
| Debian | 999 | all | firmware-nonfree | < 20180825-1 | firmware-nonfree_20180825-1_all.deb |
| Debian | 13 | all | firmware-nonfree | < 20180825-1 | firmware-nonfree_20180825-1_all.deb |
| Debian | 12 | all | wpa | < 2:2.4-1.1 | wpa_2:2.4-1.1_all.deb |
| Debian | 11 | all | wpa | < 2:2.4-1.1 | wpa_2:2.4-1.1_all.deb |
| Debian | 10 | all | wpa | < 2:2.4-1.1 | wpa_2:2.4-1.1_all.deb |
| Debian | 999 | all | wpa | < 2:2.4-1.1 | wpa_2:2.4-1.1_all.deb |
| Debian | 13 | all | wpa | < 2:2.4-1.1 | wpa_2:2.4-1.1_all.deb |
Related
prion
prion
Authentication flaw
2017-10-17 13:29:00
veracode
veracode
Key Reinstallation Attack (KRACK)
2019-05-16 01:48:06
ubuntucve
ubuntucve
CVE-2017-13078
2017-10-16 00:00:00
redhatcve
redhatcve
CVE-2017-13078
2017-10-16 09:50:51
CVE-2017-13077
2019-10-08 10:15:50
alpinelinux
alpinelinux
CVE-2017-13078
2017-10-17 13:29:00
osv
osv
CVE-2017-13078
2017-10-17 13:29:00
firmware-nonfree - security update
2018-11-10 00:00:00
wpa - security update
2017-10-31 00:00:00
cve
cve
CVE-2017-13078
2017-10-17 13:29:00
apple
apple
About the security content of AirPort Base Station Firmware Update 7.6.9
2017-12-12 00:00:00
About the security content of Wi-Fi Update for Boot Camp 6.4.0
2018-07-05 00:00:00
openvas
openvas
Intel Active Management Technology WPA2 Key Reinstallation Vulnerabilities - KRACK
2017-10-19 00:00:00
RedHat Update for wpa_supplicant RHSA-2017:2911-01
2017-10-20 00:00:00
CentOS Update for wpa_supplicant CESA-2017:2911 centos6
2017-10-20 00:00:00
ics
ics
PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol
2017-11-21 12:00:00
Stryker Medical Beds
2019-01-29 12:00:00
PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol
2017-12-19 12:00:00
nessus
nessus
Oracle Linux 6 : wpa_supplicant (ELSA-2017-2911) (KRACK)
2017-10-19 00:00:00
RHEL 6 : wpa_supplicant (RHSA-2017:2911) (KRACK)
2017-10-19 00:00:00
centos
centos
wpa_supplicant security update
2017-10-18 16:57:30
wpa_supplicant security update
2017-10-17 21:54:54
redhat
redhat
(RHSA-2017:2911) Important: wpa_supplicant security update
2017-10-18 15:43:19
(RHSA-2017:2907) Important: wpa_supplicant security update
2017-10-17 20:14:23
hp
hp
HP Printing Security Advisory - KRACK Attacks Potential Vulnerabilities
2018-01-09 00:00:00
mageia
mageia
Updated nonfree firmware packages fixes security vulnerabilities
2018-07-25 11:24:17
Updated wpa_supplicant and hostapd packages fix security vulnerabilities
2017-10-19 21:14:02
suse
suse
Security update for wpa_supplicant (important)
2017-10-17 18:11:19
Security update for wpa_supplicant (important)
2017-10-17 21:07:43
Security update for wpa_supplicant (important)
2017-10-18 15:07:12
oraclelinux
oraclelinux
wpa_supplicant security update
2017-10-18 00:00:00
wpa_supplicant security update
2017-10-17 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: hostapd-2.6-6.fc25
2017-11-15 22:30:40
[SECURITY] Fedora 27 Update: hostapd-2.6-6.fc27
2017-11-15 17:59:04
[SECURITY] Fedora 26 Update: hostapd-2.6-6.fc26
2017-11-15 20:23:27
ibm
ibm
Security Bulletin: Vulnerabilities in wpa_supplicant affect PowerKVM (KRACK)
2018-06-18 01:39:24
archlinux
archlinux
[ASA-201710-23] hostapd: man-in-the-middle
2017-10-16 00:00:00
[ASA-201710-22] wpa_supplicant: man-in-the-middle
2017-10-16 00:00:00
debian
debian
[SECURITY] [DLA 1573-1] firmware-nonfree security update
2018-11-13 01:33:10
[SECURITY] [DSA 3999-1] wpa security update
2017-10-16 09:20:15
[SECURITY] [DLA 1150-1] wpa security update
2017-10-31 14:48:26
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:07.wpa
2017-10-17 00:00:00
nvidia
nvidia
Security Bulletin: NVIDIA Linux for Tegra (L4T) “KRACK” vulnerabilities
2017-12-20 00:00:00
fortinet
fortinet
Key Reinstallation Attacks: Cryptographic/protocol attack against WPA2
2017-10-16 00:00:00
slackware
slackware
[slackware-security] wpa_supplicant
2017-10-18 19:36:09
intel
intel
f5
f5
K23642330 : Multiple WPA2 vulnerabilities (KRACK)
2017-10-17 00:00:00
thn
thn
cisco
cisco
hackerone
hackerone
myhack58
myhack58
freebsd
freebsd
WPA packet number reuse with replayed messages and key reinstallation
2017-10-16 00:00:00
huawei
huawei
gentoo
gentoo
hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks
2017-11-10 00:00:00
lenovo
lenovo
WPA2 Protocol Vulnerabilities - US
2018-12-18 15:12:07
WPA2 Protocol Vulnerabilities - Lenovo Support US
2018-12-18 15:12:07
ubuntu
ubuntu
wpa_supplicant and hostapd vulnerabilities
2017-10-16 00:00:00
cert
cert
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
5.3 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
2.9 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
48.4%
Related for DEBIANCVE:CVE-2017-13078