Vulnerability Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Ubuntu Linux | 14.04 |
| Debian | Debian Linux | 8.0 |
| Freebsd | Freebsd | All versions |
| Opensuse | Leap | 42.2 |
| Redhat | Enterprise Linux Desktop | 7 |
| Redhat | Enterprise Linux Server | 7 |
| W1.Fi | Hostapd | 0.2.4 |
| W1.Fi | Wpa Supplicant | 0.2.4 |
| Suse | Linux Enterprise Desktop | 12 |
| Suse | Linux Enterprise Point Of Sale | 11 |
| Suse | Linux Enterprise Server | 11 |
| Suse | Openstack Cloud | 6 |
Related Weaknesses (CWE)
References
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txtThird Party Advisory
- http://www.kb.cert.org/vuls/id/228519Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/101274Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039576Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039577Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039581Third Party AdvisoryVDB Entry
- https://access.redhat.com/security/vulnerabilities/kracksThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
- https://security.gentoo.org/glsa/201711-03
- https://support.lenovo.com/us/en/product_security/LEN-17420Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Third Party Advisory
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txtThird Party Advisory
- https://www.krackattacks.com/Technical DescriptionThird Party Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txtThird Party Advisory
- http://www.kb.cert.org/vuls/id/228519Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2017-13084?
CVE-2017-13084 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, d...
How severe is CVE-2017-13084?
CVE-2017-13084 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-13084?
Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Debian Debian Linux, Freebsd Freebsd, Opensuse Leap, Redhat Enterprise Linux Desktop.