CVE-2017-13080
CVE-2017-13080
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVSS 5.3 · Moyenne · EPSS 2,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
wi-fi protected access (wpa and wpa2)
- Versions du logiciel
- WPA: Concernée
- WPA2: Concernée
Aucun correctif publié
firmware-nonfree Debian:12
- Versions du logiciel
- 0.1
- 0.10
- 0.11
- 0.12
- 0.13
- 0.13~bpo40+1
- 0.14
- 0.14+lenny1
- 0.14+lenny2
- 0.15
- 0.16
- 0.16~bpo50+1
- 0.17
- 0.17~bpo50+1
- 0.18
- 0.19
- 0.2
- 0.20
- 0.21
- 0.22
- 0.23
- 0.23~bpo50+1
- 0.24
- 0.24~bpo50+1
- 0.25
- 0.26
- 0.27
- 0.27~bpo50+1
- 0.28
- 0.28+squeeze1
- 0.29
- 0.3
- 0.30
- 0.31
- 0.32
- 0.32~bpo60+1
- 0.33
- 0.34
- 0.35
- 0.35~bpo60+1
- 0.36
- 0.36+wheezy.1
- 0.36+wheezy.1~bpo60+1
- 0.37
- 0.38
- 0.38~bpo70+1
- 0.39
- 0.39~bpo70+1
- 0.4
- 0.4+etchnhalf.1
- 0.40
- 0.40~bpo70+1
- 0.41
- 0.41~bpo70+1
- 0.42
- 0.43
- 0.43~bpo70+1
- 0.44
- 0.44~bpo8+1
- 0.4etch1
- 0.5
- 0.6
- 0.7
- 0.8
- 0.9
- 20151018-1
- 20151018-2
- 20151018-2~bpo8+1
- 20151207-1
- 20151207-1~bpo8+1
- 20160110-1
- 20160110-1~bpo8+1
- 20160824-1
- 20160824-1~bpo8+1
- 20161130-1
- 20161130-2
- 20161130-2~bpo8+1
- 20161130-3
- 20161130-3~bpo8+1
- 20161130-4
- 20161130-4~deb8u1
- 20161130-5
- 20161130-5~deb8u1
- 20170823-1
- 20170823-1~bpo9+1
- 20180518-1
- 20180518-1~bpo9+1
- Plages de versions concernées
- ECOSYSTEM: < 20180825-1
Mettez à jour vers 20180825-1
firmware-nonfree Debian:13
- Versions du logiciel
- 0.1
- 0.10
- 0.11
- 0.12
- 0.13
- 0.13~bpo40+1
- 0.14
- 0.14+lenny1
- 0.14+lenny2
- 0.15
- 0.16
- 0.16~bpo50+1
- 0.17
- 0.17~bpo50+1
- 0.18
- 0.19
- 0.2
- 0.20
- 0.21
- 0.22
- 0.23
- 0.23~bpo50+1
- 0.24
- 0.24~bpo50+1
- 0.25
- 0.26
- 0.27
- 0.27~bpo50+1
- 0.28
- 0.28+squeeze1
- 0.29
- 0.3
- 0.30
- 0.31
- 0.32
- 0.32~bpo60+1
- 0.33
- 0.34
- 0.35
- 0.35~bpo60+1
- 0.36
- 0.36+wheezy.1
- 0.36+wheezy.1~bpo60+1
- 0.37
- 0.38
- 0.38~bpo70+1
- 0.39
- 0.39~bpo70+1
- 0.4
- 0.4+etchnhalf.1
- 0.40
- 0.40~bpo70+1
- 0.41
- 0.41~bpo70+1
- 0.42
- 0.43
- 0.43~bpo70+1
- 0.44
- 0.44~bpo8+1
- 0.4etch1
- 0.5
- 0.6
- 0.7
- 0.8
- 0.9
- 20151018-1
- 20151018-2
- 20151018-2~bpo8+1
- 20151207-1
- 20151207-1~bpo8+1
- 20160110-1
- 20160110-1~bpo8+1
- 20160824-1
- 20160824-1~bpo8+1
- 20161130-1
- 20161130-2
- 20161130-2~bpo8+1
- 20161130-3
- 20161130-3~bpo8+1
- 20161130-4
- 20161130-4~deb8u1
- 20161130-5
- 20161130-5~deb8u1
- 20170823-1
- 20170823-1~bpo9+1
- 20180518-1
- 20180518-1~bpo9+1
- Plages de versions concernées
- ECOSYSTEM: < 20180825-1
Mettez à jour vers 20180825-1
firmware-nonfree Debian:14
- Versions du logiciel
- 0.1
- 0.10
- 0.11
- 0.12
- 0.13
- 0.13~bpo40+1
- 0.14
- 0.14+lenny1
- 0.14+lenny2
- 0.15
- 0.16
- 0.16~bpo50+1
- 0.17
- 0.17~bpo50+1
- 0.18
- 0.19
- 0.2
- 0.20
- 0.21
- 0.22
- 0.23
- 0.23~bpo50+1
- 0.24
- 0.24~bpo50+1
- 0.25
- 0.26
- 0.27
- 0.27~bpo50+1
- 0.28
- 0.28+squeeze1
- 0.29
- 0.3
- 0.30
- 0.31
- 0.32
- 0.32~bpo60+1
- 0.33
- 0.34
- 0.35
- 0.35~bpo60+1
- 0.36
- 0.36+wheezy.1
- 0.36+wheezy.1~bpo60+1
- 0.37
- 0.38
- 0.38~bpo70+1
- 0.39
- 0.39~bpo70+1
- 0.4
- 0.4+etchnhalf.1
- 0.40
- 0.40~bpo70+1
- 0.41
- 0.41~bpo70+1
- 0.42
- 0.43
- 0.43~bpo70+1
- 0.44
- 0.44~bpo8+1
- 0.4etch1
- 0.5
- 0.6
- 0.7
- 0.8
- 0.9
- 20151018-1
- 20151018-2
- 20151018-2~bpo8+1
- 20151207-1
- 20151207-1~bpo8+1
- 20160110-1
- 20160110-1~bpo8+1
- 20160824-1
- 20160824-1~bpo8+1
- 20161130-1
- 20161130-2
- 20161130-2~bpo8+1
- 20161130-3
- 20161130-3~bpo8+1
- 20161130-4
- 20161130-4~deb8u1
- 20161130-5
- 20161130-5~deb8u1
- 20170823-1
- 20170823-1~bpo9+1
- 20180518-1
- 20180518-1~bpo9+1
- Plages de versions concernées
- ECOSYSTEM: < 20180825-1
Mettez à jour vers 20180825-1
linux Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 4.13.13-1
Mettez à jour vers 4.13.13-1
linux Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 4.13.13-1
Mettez à jour vers 4.13.13-1
linux Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 4.13.13-1
Mettez à jour vers 4.13.13-1
wpa Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2:2.4-1.1
Mettez à jour vers 2:2.4-1.1
wpa Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:2.4-1.1
Mettez à jour vers 2:2.4-1.1
wpa Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:2.4-1.1
Mettez à jour vers 2:2.4-1.1
linux-firmware Ubuntu:14.04:LTS
- Versions du logiciel
- 1.116
- 1.117
- 1.118
- 1.119
- 1.121
- 1.122
- 1.123
- 1.124
- 1.125
- 1.126
- 1.127
- 1.127.2
- 1.127.3
- 1.127.4
- 1.127.5
- 1.127.6
- 1.127.7
- 1.127.8
- 1.127.10
- 1.127.11
- 1.127.12
- 1.127.13
- 1.127.14
- 1.127.15
- 1.127.16
- 1.127.18
- 1.127.19
- 1.127.20
- 1.127.22
- 1.127.23
- Plages de versions concernées
- ECOSYSTEM: < 1.127.24
Mettez à jour vers 1.127.24
wpa Ubuntu:14.04:LTS
- Versions du logiciel
- 1.0-3ubuntu2
- 1.0-3ubuntu3
- 1.0-3ubuntu4
- 2.1-0ubuntu1
- 2.1-0ubuntu1.1
- 2.1-0ubuntu1.2
- 2.1-0ubuntu1.3
- 2.1-0ubuntu1.4
- Plages de versions concernées
- ECOSYSTEM: < 2.1-0ubuntu1.5
Mettez à jour vers 2.1-0ubuntu1.5
linux-firmware Ubuntu:16.04:LTS
- Versions du logiciel
- 1.149
- 1.150
- 1.152
- 1.153
- 1.154
- 1.155
- 1.156
- 1.157
- 1.157.1
- 1.157.2
- 1.157.3
- 1.157.4
- 1.157.5
- 1.157.6
- 1.157.8
- 1.157.10
- 1.157.11
- 1.157.12
- 1.157.13
- Plages de versions concernées
- ECOSYSTEM: < 1.157.14
Mettez à jour vers 1.157.14
wpa Ubuntu:16.04:LTS
- Versions du logiciel
- 2.4-0ubuntu3
- 2.4-0ubuntu4
- 2.4-0ubuntu5
- 2.4-0ubuntu6
- Plages de versions concernées
- ECOSYSTEM: < 2.4-0ubuntu6.2
Mettez à jour vers 2.4-0ubuntu6.2
linux-firmware Ubuntu:18.04:LTS
- Versions du logiciel
- 1.169
- Plages de versions concernées
- ECOSYSTEM: < 1.170
Mettez à jour vers 1.170
wpa Ubuntu:18.04:LTS
- Plages de versions concernées
- ECOSYSTEM: < 2.4-0ubuntu10
Mettez à jour vers 2.4-0ubuntu10
Sources originales
- http://www.securitytracker.com/id/1039581
- https://support.apple.com/HT208221
- http://www.securityfocus.com/bid/101274
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
- http://www.debian.org/security/2017/dsa-3999
- https://support.apple.com/HT208327
- http://www.securitytracker.com/id/1039578
- https://support.apple.com/HT208325
- https://access.redhat.com/security/vulnerabilities/kracks
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa
- https://access.redhat.com/errata/RHSA-2017:2911
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
- http://www.securitytracker.com/id/1039577
- http://www.securitytracker.com/id/1039572
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
- https://support.apple.com/HT208222
- https://support.apple.com/HT208334
- https://source.android.com/security/bulletin/2017-11-01
- https://security.gentoo.org/glsa/201711-03
- https://nvd.nist.gov/vuln/detail/CVE-2017-13080