CVE-2017-13081: Medium severity android vulnerability
Published Oct 17, 2017
·Updated
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Affected Software
86 affected components
Google Android
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.04
Debian Debian Linux=8.0
Debian Debian Linux=9.0
FreeBSD FreeBSD
FreeBSD FreeBSD=10
FreeBSD FreeBSD=10.4
FreeBSD FreeBSD=11
FreeBSD FreeBSD=11.1
openSUSE Leap=42.2
openSUSE Leap=42.3
redhat Enterprise Linux Desktop=7
redhat Enterprise Linux Server=7
w1.fi hostapd=0.2.4
w1.fi hostapd=0.2.5
w1.fi hostapd=0.2.6
w1.fi hostapd=0.2.8
w1.fi hostapd=0.3.7
w1.fi hostapd=0.3.9
w1.fi hostapd=0.3.10
w1.fi hostapd=0.3.11
w1.fi hostapd=0.4.7
w1.fi hostapd=0.4.8
w1.fi hostapd=0.4.9
w1.fi hostapd=0.4.10
w1.fi hostapd=0.4.11
w1.fi hostapd=0.5.7
w1.fi hostapd=0.5.8
w1.fi hostapd=0.5.9
w1.fi hostapd=0.5.10
w1.fi hostapd=0.5.11
w1.fi hostapd=0.6.8
w1.fi hostapd=0.6.9
w1.fi hostapd=0.6.10
w1.fi hostapd=0.7.3
w1.fi hostapd=1.0
w1.fi hostapd=1.1
w1.fi hostapd=2.0
w1.fi hostapd=2.1
w1.fi hostapd=2.2
w1.fi hostapd=2.3
w1.fi hostapd=2.4
w1.fi hostapd=2.5
w1.fi hostapd=2.6
w1.fi Wpa Supplicant=0.2.4
w1.fi Wpa Supplicant=0.2.5
w1.fi Wpa Supplicant=0.2.6
w1.fi Wpa Supplicant=0.2.7
w1.fi Wpa Supplicant=0.2.8
w1.fi Wpa Supplicant=0.3.7
w1.fi Wpa Supplicant=0.3.8
w1.fi Wpa Supplicant=0.3.9
w1.fi Wpa Supplicant=0.3.10
w1.fi Wpa Supplicant=0.3.11
w1.fi Wpa Supplicant=0.4.7
w1.fi Wpa Supplicant=0.4.8
w1.fi Wpa Supplicant=0.4.9
w1.fi Wpa Supplicant=0.4.10
w1.fi Wpa Supplicant=0.4.11
w1.fi Wpa Supplicant=0.5.7
w1.fi Wpa Supplicant=0.5.8
w1.fi Wpa Supplicant=0.5.9
w1.fi Wpa Supplicant=0.5.10
w1.fi Wpa Supplicant=0.5.11
w1.fi Wpa Supplicant=0.6.8
w1.fi Wpa Supplicant=0.6.9
w1.fi Wpa Supplicant=0.6.10
w1.fi Wpa Supplicant=0.7.3
w1.fi Wpa Supplicant=1.0
w1.fi Wpa Supplicant=1.1
w1.fi Wpa Supplicant=2.0
w1.fi Wpa Supplicant=2.1
w1.fi Wpa Supplicant=2.2
w1.fi Wpa Supplicant=2.3
w1.fi Wpa Supplicant=2.4
w1.fi Wpa Supplicant=2.5
w1.fi Wpa Supplicant=2.6
SUSE Linux Enterprise Desktop=12-sp2
SUSE Linux Enterprise Desktop=12-sp3
SUSE Linux Enterprise Point of Sale=11-sp3
SUSE Linux Enterprise Server Ltss=11-sp3
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12
SUSE Openstack Cloud=6
Event History
Oct 17, 2017
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-13081?
CVE-2017-13081 has a critical severity rating due to the potential for remote exploitation.
2
How do I fix CVE-2017-13081?
To fix CVE-2017-13081, you should apply the latest patches provided by your operating system vendor.
3
Which software is affected by CVE-2017-13081?
CVE-2017-13081 affects various versions of Android, Ubuntu, Debian, FreeBSD, and openSUSE, among others.
4
Can CVE-2017-13081 be exploited remotely?
Yes, CVE-2017-13081 can be exploited by an attacker within radio range to spoof frames from access points.
5
What type of vulnerability is CVE-2017-13081?
CVE-2017-13081 is a vulnerability in the Wi-Fi Protected Access (WPA and WPA2) protocols.