USN-3505-1 — linux-firmware vulnerabilities

Summary

Mathy Vanhoef discovered that the firmware for several Intel WLAN
devices incorrectly handled WPA2 in relation to Wake on WLAN. A
remote attacker could use this issue with key reinstallation attacks
to obtain sensitive information. (CVE-2017-13080, CVE-2017-13081)

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	linux-firmware	1.127.24
Ubuntu · 16.04 LTS 16.04:LTS	linux-firmware	1.157.14

Vulnerabilities 2

Unscored —

CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handsh…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) linux linux-firmware Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13081

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) linux-firmware wpa Debian Ubuntu Alpine

Oct 17, 2017

References

report
https://ubuntu.com/security/CVE-2017-13080
report
https://ubuntu.com/security/CVE-2017-13081

linux-firmware vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 2

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handsh…

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …

References