CVE-2017-13086
Medium
Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Canonical Ubuntu Linux
PublishedOct 17, 2017
First seenOct 17, 2017
Weakness typeCWE-323CWE-323
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canonical ubuntu_linux | 14.04, 16.04, 17.04 | — |
| debian debian_linux | 8.0, 9.0 | — |
| freebsd freebsd | No range specified, 10, 10.4, 11, 11.1 | — |
| opensuse leap | 42.2, 42.3 | — |
| redhat enterprise_linux_desktop | 7 | — |
| redhat enterprise_linux_server | 7 | — |
| w1.fi hostapd | 0.2.4, 0.2.5, 0.2.6, 0.2.8, 0.3.7, 0.3.9, 0.3.10, 0.3.11, 0.4.7, 0.4.8, 0.4.9, 0.4.10, 0.4.11, 0.5.7, 0.5.8, 0.5.9, 0.5.10, 0.5.11, 0.6.8, 0.6.9, 0.6.10, 0.7.3, 1.0, 1.1, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6 | — |
| w1.fi wpa_supplicant | 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.3.7, 0.3.8, 0.3.9, 0.3.10, 0.3.11, 0.4.7, 0.4.8, 0.4.9, 0.4.10, 0.4.11, 0.5.7, 0.5.8, 0.5.9, 0.5.10, 0.5.11, 0.6.8, 0.6.9, 0.6.10, 0.7.3, 1.0, 1.1, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6 | — |
| suse linux_enterprise_desktop | 12 | — |
| suse linux_enterprise_point_of_sale | 11 | — |
| suse linux_enterprise_server | 11, 12 | — |
| suse openstack_cloud | 6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.