CVE-2017-13084
First published: Tue Oct 17 2017(Updated: )
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu | =14.04 | |
| Ubuntu | =16.04 | |
| Ubuntu | =17.04 | |
| Debian | =8.0 | |
| Debian | =9.0 | |
| FreeBSD FreeBSD | ||
| FreeBSD FreeBSD | =10 | |
| FreeBSD FreeBSD | =10.4 | |
| FreeBSD FreeBSD | =11 | |
| FreeBSD FreeBSD | =11.1 | |
| openSUSE | =42.2 | |
| openSUSE | =42.3 | |
| redhat enterprise Linux desktop | =7 | |
| redhat enterprise Linux server | =7 | |
| w1.fi hostapd | =0.2.4 | |
| w1.fi hostapd | =0.2.5 | |
| w1.fi hostapd | =0.2.6 | |
| w1.fi hostapd | =0.2.8 | |
| w1.fi hostapd | =0.3.7 | |
| w1.fi hostapd | =0.3.9 | |
| w1.fi hostapd | =0.3.10 | |
| w1.fi hostapd | =0.3.11 | |
| w1.fi hostapd | =0.4.7 | |
| w1.fi hostapd | =0.4.8 | |
| w1.fi hostapd | =0.4.9 | |
| w1.fi hostapd | =0.4.10 | |
| w1.fi hostapd | =0.4.11 | |
| w1.fi hostapd | =0.5.7 | |
| w1.fi hostapd | =0.5.8 | |
| w1.fi hostapd | =0.5.9 | |
| w1.fi hostapd | =0.5.10 | |
| w1.fi hostapd | =0.5.11 | |
| w1.fi hostapd | =0.6.8 | |
| w1.fi hostapd | =0.6.9 | |
| w1.fi hostapd | =0.6.10 | |
| w1.fi hostapd | =0.7.3 | |
| w1.fi hostapd | =1.0 | |
| w1.fi hostapd | =1.1 | |
| w1.fi hostapd | =2.0 | |
| w1.fi hostapd | =2.1 | |
| w1.fi hostapd | =2.2 | |
| w1.fi hostapd | =2.3 | |
| w1.fi hostapd | =2.4 | |
| w1.fi hostapd | =2.5 | |
| w1.fi hostapd | =2.6 | |
| wpa_supplicant | =0.2.4 | |
| wpa_supplicant | =0.2.5 | |
| wpa_supplicant | =0.2.6 | |
| wpa_supplicant | =0.2.7 | |
| wpa_supplicant | =0.2.8 | |
| wpa_supplicant | =0.3.7 | |
| wpa_supplicant | =0.3.8 | |
| wpa_supplicant | =0.3.9 | |
| wpa_supplicant | =0.3.10 | |
| wpa_supplicant | =0.3.11 | |
| wpa_supplicant | =0.4.7 | |
| wpa_supplicant | =0.4.8 | |
| wpa_supplicant | =0.4.9 | |
| wpa_supplicant | =0.4.10 | |
| wpa_supplicant | =0.4.11 | |
| wpa_supplicant | =0.5.7 | |
| wpa_supplicant | =0.5.8 | |
| wpa_supplicant | =0.5.9 | |
| wpa_supplicant | =0.5.10 | |
| wpa_supplicant | =0.5.11 | |
| wpa_supplicant | =0.6.8 | |
| wpa_supplicant | =0.6.9 | |
| wpa_supplicant | =0.6.10 | |
| wpa_supplicant | =0.7.3 | |
| wpa_supplicant | =1.0 | |
| wpa_supplicant | =1.1 | |
| wpa_supplicant | =2.0 | |
| wpa_supplicant | =2.1 | |
| wpa_supplicant | =2.2 | |
| wpa_supplicant | =2.3 | |
| wpa_supplicant | =2.4 | |
| wpa_supplicant | =2.5 | |
| wpa_supplicant | =2.6 | |
| SUSE Linux Enterprise Desktop with Beagle | =12-sp2 | |
| SUSE Linux Enterprise Desktop with Beagle | =12-sp3 | |
| SUSE Linux Enterprise Point of Sale | =11-sp3 | |
| SUSE Linux Enterprise Server | =11-sp3 | |
| SUSE Linux Enterprise Server | =11-sp4 | |
| SUSE Linux Enterprise Server | =12 | |
| openSUSE OpenStack Cloud | =6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
- http://www.kb.cert.org/vuls/id/228519
- http://www.securityfocus.com/bid/101274
- http://www.securitytracker.com/id/1039576
- http://www.securitytracker.com/id/1039577
- http://www.securitytracker.com/id/1039581
- https://access.redhat.com/security/vulnerabilities/kracks
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
- https://security.gentoo.org/glsa/201711-03
- https://support.lenovo.com/us/en/product_security/LEN-17420
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
- https://www.krackattacks.com/
Frequently Asked Questions
What is the severity of CVE-2017-13084?
CVE-2017-13084 is classified as a high severity vulnerability due to its potential to allow attackers to replay, decrypt, or spoof frames in wireless networks.
How do I fix CVE-2017-13084?
To mitigate CVE-2017-13084, ensure that your devices are updated to the latest firmware or software versions that include patches for this vulnerability.
What systems are affected by CVE-2017-13084?
CVE-2017-13084 affects various systems including certain versions of Ubuntu Linux, Debian GNU/Linux, FreeBSD, openSUSE, and Red Hat Enterprise Linux.
What type of attack is possible with CVE-2017-13084?
CVE-2017-13084 allows for replay, decryption, and spoofing attacks during the PeerKey handshake, posing serious security risks in wireless communications.
How can I verify if my system is vulnerable to CVE-2017-13084?
You can verify if your system is vulnerable to CVE-2017-13084 by checking the installed versions of the affected software and cross-referencing them with the vulnerability's details.
- agent/type
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/14.04
- version/ubuntu/16.04
- version/ubuntu/17.04
- vendor/debian
- canonical/debian
- version/debian/8.0
- version/debian/9.0
- vendor/freebsd
- canonical/freebsd freebsd
- version/freebsd freebsd/10
- version/freebsd freebsd/10.4
- version/freebsd freebsd/11
- version/freebsd freebsd/11.1
- vendor/opensuse
- canonical/opensuse
- version/opensuse/42.2
- version/opensuse/42.3
- vendor/redhat
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/7
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/7
- vendor/w1.fi
- canonical/w1.fi hostapd
- version/w1.fi hostapd/0.2.4
- version/w1.fi hostapd/0.2.5
- version/w1.fi hostapd/0.2.6
- version/w1.fi hostapd/0.2.8
- version/w1.fi hostapd/0.3.7
- version/w1.fi hostapd/0.3.9
- version/w1.fi hostapd/0.3.10
- version/w1.fi hostapd/0.3.11
- version/w1.fi hostapd/0.4.7
- version/w1.fi hostapd/0.4.8
- version/w1.fi hostapd/0.4.9
- version/w1.fi hostapd/0.4.10
- version/w1.fi hostapd/0.4.11
- version/w1.fi hostapd/0.5.7
- version/w1.fi hostapd/0.5.8
- version/w1.fi hostapd/0.5.9
- version/w1.fi hostapd/0.5.10
- version/w1.fi hostapd/0.5.11
- version/w1.fi hostapd/0.6.8
- version/w1.fi hostapd/0.6.9
- version/w1.fi hostapd/0.6.10
- version/w1.fi hostapd/0.7.3
- version/w1.fi hostapd/1.0
- version/w1.fi hostapd/1.1
- version/w1.fi hostapd/2.0
- version/w1.fi hostapd/2.1
- version/w1.fi hostapd/2.2
- version/w1.fi hostapd/2.3
- version/w1.fi hostapd/2.4
- version/w1.fi hostapd/2.5
- version/w1.fi hostapd/2.6
- canonical/wpa_supplicant
- version/wpa_supplicant/0.2.4
- version/wpa_supplicant/0.2.5
- version/wpa_supplicant/0.2.6
- version/wpa_supplicant/0.2.7
- version/wpa_supplicant/0.2.8
- version/wpa_supplicant/0.3.7
- version/wpa_supplicant/0.3.8
- version/wpa_supplicant/0.3.9
- version/wpa_supplicant/0.3.10
- version/wpa_supplicant/0.3.11
- version/wpa_supplicant/0.4.7
- version/wpa_supplicant/0.4.8
- version/wpa_supplicant/0.4.9
- version/wpa_supplicant/0.4.10
- version/wpa_supplicant/0.4.11
- version/wpa_supplicant/0.5.7
- version/wpa_supplicant/0.5.8
- version/wpa_supplicant/0.5.9
- version/wpa_supplicant/0.5.10
- version/wpa_supplicant/0.5.11
- version/wpa_supplicant/0.6.8
- version/wpa_supplicant/0.6.9
- version/wpa_supplicant/0.6.10
- version/wpa_supplicant/0.7.3
- version/wpa_supplicant/1.0
- version/wpa_supplicant/1.1
- version/wpa_supplicant/2.0
- version/wpa_supplicant/2.1
- version/wpa_supplicant/2.2
- version/wpa_supplicant/2.3
- version/wpa_supplicant/2.4
- version/wpa_supplicant/2.5
- version/wpa_supplicant/2.6
- vendor/suse
- canonical/suse linux enterprise desktop with beagle
- version/suse linux enterprise desktop with beagle/12-sp2
- version/suse linux enterprise desktop with beagle/12-sp3
- canonical/suse linux enterprise point of sale
- version/suse linux enterprise point of sale/11-sp3
- canonical/suse linux enterprise server
- version/suse linux enterprise server/11-sp3
- version/suse linux enterprise server/11-sp4
- version/suse linux enterprise server/12
- canonical/opensuse openstack cloud
- version/opensuse openstack cloud/6