[SECURITY] [DSA 3999-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3999-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 16, 2017 https://www.debian.org/security/faq -...

Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017

Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017 Summary A spoofing vulnerability exists in the Windows implementation of wireless networking. An attacker who successfully exploits this vulnerability could potentially replay...

CVE-2017-13087

Wi-Fi Protected Access WPA and WPA2 that support 802.11v allows reinstallation of the Group Temporal Key GTK when processing a Wireless Network Management WNM Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients...

Wi-Fi Protected Access (WPA) handshake traffic can be manipulated to induce nonce and session key reuse

Overview Wi-Fi Protected Access WPA, more commonly WPA2 handshake traffic can be manipulated to induce nonce and session key reuse, resulting in key reinstallation by a wireless access point AP or client. An attacker within range of an affected AP and client may leverage these vulnerabilities to...

CERT/CC Reports WPA2 Vulnerabilities

CERT Coordination Center CERT/CC has released information on Wi-Fi Protected Access II WPA2 protocol vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to take control of an affected system. The vulnerabilities are in the WPA2 protocol, not within individual WPA2...

CVE-2017-13078

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients...

CVE-2017-13081

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...

CVE-2017-13086

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Tunneled Direct-Link Setup TDLS Peer Key TPK during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

CVE-2017-13088

Wi-Fi Protected Access WPA and WPA2 that support 802.11v allows reinstallation of the Integrity Group Temporal Key IGTK when processing a Wireless Network Management WNM Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients...

ArubaOS WPA2 Key Reinstallation Vulnerabilities (KRACK)

The version of ArubaOS on the remote device is affected by multiple vulnerabilities related to the KRACK attacks. This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network. Note: ArbuaOS devices are only vulnerable to CVE-2017-13077,...

CVE-2017-13079

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients...

Key Reinstallation Attacks: Cryptographic/protocol attack against WPA2

Several vulnerabilities affect the Wi-Fi Protected Access II WPA2 protocol, potentially enabling Man-in-the-Middle MitM attacks between Wifi Clients and Access Points running WPA2 . The impact includes decryption, packet replay, TCP connection hijacking and HTTP content injection...

CVE-2017-13082

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the fast BSS transmission FT handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

WPA packet number reuse with replayed messages and key reinstallation

wpasupplicant developers report: A vulnerability was found in how a number of implementations can be triggered to reconfigure WPA/WPA2/RSN keys TK, GTK, or IGTK by replaying a specific frame that is used to manage the keys...

FreeBSD -- WPA2 protocol vulnerability

Problem Description: A vulnerability was found in how a number of implementations can be triggered to reconfigure WPA/WPA2/RSN keys TK, GTK, or IGTK by replaying a specific frame that is used to manage the keys. Impact: Such reinstallation of the encryption key can result in two different types o...

MikroTik RouterOS < 6.39.3 / 6.40.4 / 6.41rc (KRACK)

According to its self-reported version, the remote networking device is running a version of MikroTik 6.9.X prior to 6.39.3, 6.40.x 6.40.4, or 6.41rc. It, therefore, vulnerable to multiple vulnerabilities discovered in the WPA2 handshake protocol. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2017-13080

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients...

KRACK Demo: Critical Key Reinstallation Attack Against Widely-Used WPA2 Wi-Fi Protocol

Do you think your wireless network is secure because you're using WPA2 encryption? If yes, think again! Security researchers have discovered several key management vulnerabilities in the core of Wi-Fi Protected Access II WPA2 protocol that could allow an attacker to hack into your Wi-Fi network a...

PT-2017-2938

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi networks. An attacker within the Wi-Fi network's range can exploit this to access...

PT-2017-2946

Name of the Vulnerable Software and Affected Versions WPA2 affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi networks. An attacker within the Wi-Fi network's range can exploit this to access encrypt...