Skip to content
OpenAdvisories
Unscored CVE-2017-13080 EUVD-2017-4598GHSA-jq36-53qv-7v3m

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an att…

Published Oct 17, 2017 · Updated Aug 5, 2024 · Assigned by certcc

Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

Affected products

VendorProductAffectedFixed
Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) WPA, WPA2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 firmware-nonfree 20180825-1 —
Debian 14 linux 4.13.13-1 —
Debian 14 wpa 2:2.4-1.1 —
Debian 13 firmware-nonfree 20180825-1 —
Debian 13 linux 4.13.13-1 —
Debian 13 wpa 2:2.4-1.1 —
Debian 12 firmware-nonfree 20180825-1 —
Debian 12 linux 4.13.13-1 —
Debian 12 wpa 2:2.4-1.1 —
Debian 9 wpa 2:2.4-1+deb9u1 DSA-3999-1
Debian 8 firmware-nonfree 20161130-4~deb8u1 DLA-1573-1
Debian 8 wpa 2.3-1+deb8u5 DSA-3999-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 7 linux 3.2.96-1 DLA-1200-1
Debian 7 wpa 1.0-3+deb7u5 DLA-1150-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS linux-firmware 1.170 —
Ubuntu 18.04 LTS wpa 2.4-0ubuntu10 —
Ubuntu 16.04 LTS linux-firmware 1.157.14 USN-3505-1
Ubuntu 16.04 LTS wpa 2.4-0ubuntu6.2 USN-3455-1
Ubuntu 14.04 LTS linux-firmware 1.127.24 USN-3505-1
Ubuntu 14.04 LTS wpa 2.1-0ubuntu1.5 USN-3455-1
ReleasePackageFixed inAdvisory
RHEL 7 wpa_supplicant 1:2.6-5.el7_4.1 RHSA-2017:2907
RHEL 6 wpa_supplicant 1:0.7.3-9.el6_9.2 RHSA-2017:2911
ReleasePackageFixed inAdvisory
SLES 15 SP2 wpa_supplicant 2.9-4.20.1 SUSE-SU-2020:3380-1
SLES 15 SP1 wpa_supplicant 2.9-4.20.1 SUSE-SU-2020:3380-1
SLES 15 wpa_supplicant 2.9-4.20.1 SUSE-SU-2020:3380-1
SLES 12 SP5 wpa_supplicant 2.9-23.3.1 SUSE-SU-2020:3424-1
SLES 12 SP4 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
Show 25 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP3 kernel-docs 4.4.92-6.18.3 SUSE-SU-2017:2847-1
SLES 12 SP3 kernel-firmware 20170530-21.13.1 SUSE-SU-2017:3106-1
SLES 12 SP3 kernel-syms +3 4.4.92-6.18.1 SUSE-SU-2017:2847-1
SLES 12 SP3 wpa_supplicant 2.2-15.3.1 SUSE-SU-2022:1853-1, SUSE-SU-2017:2745-1
SLES 12 SP2 kernel-docs 4.4.90-92.45.3 SUSE-SU-2017:2869-1
SLES 12 SP2 kernel-firmware 20170530-21.13.1 SUSE-SU-2017:3106-1
SLES 12 SP2 kernel-syms +3 4.4.90-92.45.1 SUSE-SU-2017:2869-1
SLES 12 SP2 wpa_supplicant 2.2-15.3.1 SUSE-SU-2022:1853-1, SUSE-SU-2017:2745-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.63.1 SUSE-SU-2017:2908-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_10 11-2.1 SUSE-SU-2017:3124-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_11 10-2.1 SUSE-SU-2017:3147-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_12 9-2.1 SUSE-SU-2017:3131-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_13 8-2.1 SUSE-SU-2017:3118-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_14 7-2.1 SUSE-SU-2017:3127-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_15 +1 6-2.1 SUSE-SU-2017:3153-1, SUSE-SU-2017:3145-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_17 5-2.1 SUSE-SU-2017:3150-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_18 +2 4-2.1 SUSE-SU-2017:3157-1, SUSE-SU-2017:3152-1, SUSE-SU-2017:3148-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 3-2.1 SUSE-SU-2017:3158-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_22 1-2.1 SUSE-SU-2017:2908-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_9 12-2.1 SUSE-SU-2017:3130-1
SLES 12 SP1 wpa_supplicant 2.2-15.3.1 SUSE-SU-2017:2745-1
SLES 12 kernel-ec2 +4 3.12.61-52.101.1 SUSE-SU-2017:2920-1, SUSE-SU-2017:2908-1
SLES 12 kgraft-patch-SLE12_Update_17 +1 10-2.1 SUSE-SU-2017:3151-1, SUSE-SU-2017:3117-1
SLES 12 kgraft-patch-SLE12_Update_19 9-2.1 SUSE-SU-2017:3154-1
SLES 12 kgraft-patch-SLE12_Update_20 7-2.1 SUSE-SU-2017:3160-1
SLES 12 kgraft-patch-SLE12_Update_21 +1 6-2.1 SUSE-SU-2017:3149-1, SUSE-SU-2017:3146-1
SLES 12 kgraft-patch-SLE12_Update_23 5-2.1 SUSE-SU-2017:3103-1
SLES 12 kgraft-patch-SLE12_Update_24 +2 4-2.1 SUSE-SU-2017:3125-1, SUSE-SU-2017:3123-1, SUSE-SU-2017:3119-1
SLES 12 kgraft-patch-SLE12_Update_27 3-2.1 SUSE-SU-2017:3132-1
SLES 12 kgraft-patch-SLE12_Update_28 1-8.1 SUSE-SU-2017:2920-1
SLES 12 wpa_supplicant 2.2-15.3.1 SUSE-SU-2017:2745-1
SLES 11 SP4 kernel-docs 3.0.101-108.18.3 SUSE-SU-2017:3265-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.18.1 SUSE-SU-2017:3265-1
SLES 11 SP4 wpa_supplicant 0.7.1-6.18.3.1 SUSE-SU-2017:2752-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.106.11.1 SUSE-SU-2018:0040-1
SLES 11 SP3 wpa_supplicant 0.7.1-6.18.3.1 SUSE-SU-2017:2752-1
SLES for SAP 15 wpa_supplicant 2.9-4.20.1 SUSE-SU-2020:3380-1
SLES for SAP 12 SP5 wpa_supplicant 2.9-23.3.1 SUSE-SU-2020:3424-1
SLES for SAP 12 SP4 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
SLES for SAP 12 SP3 kernel-firmware 20170530-21.13.1 SUSE-SU-2017:3106-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.92-6.18.1 SUSE-SU-2017:2847-1
SLES for SAP 12 SP3 wpa_supplicant 2.2-15.3.1 SUSE-SU-2022:1853-1, SUSE-SU-2017:2745-1
SLES for SAP 12 SP2 kernel-firmware 20170530-21.13.1 SUSE-SU-2017:3106-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.90-92.45.1 SUSE-SU-2017:2869-1
SLES for SAP 12 SP2 wpa_supplicant 2.2-15.3.1 SUSE-SU-2017:2745-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.63.1 SUSE-SU-2017:2908-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_10 11-2.1 SUSE-SU-2017:3124-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_11 10-2.1 SUSE-SU-2017:3147-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_12 9-2.1 SUSE-SU-2017:3131-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_13 8-2.1 SUSE-SU-2017:3118-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_14 7-2.1 SUSE-SU-2017:3127-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_15 +1 6-2.1 SUSE-SU-2017:3153-1, SUSE-SU-2017:3145-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_17 5-2.1 SUSE-SU-2017:3150-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_18 +2 4-2.1 SUSE-SU-2017:3157-1, SUSE-SU-2017:3152-1, SUSE-SU-2017:3148-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 3-2.1 SUSE-SU-2017:3158-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_22 1-2.1 SUSE-SU-2017:2908-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_9 12-2.1 SUSE-SU-2017:3130-1
SLES for SAP 12 SP1 wpa_supplicant 2.2-15.3.1 SUSE-SU-2017:2745-1
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-108.18.1 SUSE-SU-2017:3265-1
SLES for SAP 11 SP4 wpa_supplicant 0.7.1-6.18.3.1 SUSE-SU-2017:2752-1
SLE Real Time 12 SP2 kernel-rt +3 4.4.95-21.1 SUSE-SU-2017:3267-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-69.11.1 SUSE-SU-2017:3165-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_1 3-2.1 SUSE-SU-2017:3072-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 +1 2-2.1 SUSE-SU-2017:3076-1, SUSE-SU-2017:3074-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_4 1-4.3 SUSE-SU-2017:2847-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_11 +1 4-2.1 SUSE-SU-2017:3128-1, SUSE-SU-2017:3122-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_13 3-2.1 SUSE-SU-2017:3120-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_14 1-2.4 SUSE-SU-2017:2869-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_2 +2 10-2.1 SUSE-SU-2017:3156-1, SUSE-SU-2017:3136-1, SUSE-SU-2017:3134-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_5 8-2.1 SUSE-SU-2017:3159-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_6 7-2.1 SUSE-SU-2017:3139-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_7 +1 6-2.1 SUSE-SU-2017:3129-1, SUSE-SU-2017:3121-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_9 +1 5-2.1 SUSE-SU-2017:3126-1, SUSE-SU-2017:3116-1
SLE HPC 15 wpa_supplicant 2.9-4.20.1 SUSE-SU-2020:3380-1
SUSE OpenStack Cloud Crowbar 9 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
SUSE OpenStack Cloud Crowbar 8 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
SUSE OpenStack Cloud 9 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
SUSE OpenStack Cloud 8 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
SUSE OpenStack Cloud 6 kernel-xen +3 3.12.74-60.64.63.1 SUSE-SU-2017:2908-1
SUSE OpenStack Cloud 6 kgraft-patch-SLE12-SP1_Update_22 1-2.1 SUSE-SU-2017:2908-1
SUSE OpenStack Cloud 6 wpa_supplicant 2.2-15.3.1 SUSE-SU-2017:2745-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.106.11.1 SUSE-SU-2018:0040-1
SUSE Linux Enterprise Point of Sale 11 SP3 wpa_supplicant 0.7.1-6.18.3.1 SUSE-SU-2017:2752-1
SUSE HPE Helion OpenStack 8 wpa_supplicant 2.9-15.22.1 SUSE-SU-2022:1853-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-firmware 20210901-1.2 openSUSE-SU-2024:10894-1
openSUSE Tumbleweed kernel-firmware-bluetooth 20250208-1.1 openSUSE-SU-2025:14774-1
openSUSE Tumbleweed kernel-firmware-i915 +1 20250210-1.1 openSUSE-SU-2025:14798-1, openSUSE-SU-2025:14779-1
openSUSE Tumbleweed kernel-firmware-ti +30 20250206-1.1 openSUSE-SU-2025:14804-1, openSUSE-SU-2025:14801-1, openSUSE-SU-2025:14800-1
openSUSE Tumbleweed kernel-source 5.14.6-1.4 openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1
openSUSE Leap 15.2 wpa_supplicant 2.9-lp152.8.3.1 openSUSE-SU-2020:2059-1
openSUSE Leap 15.1 wpa_supplicant 2.9-lp151.5.10.1 openSUSE-SU-2020:2053-1
ReleasePackageFixed inAdvisory
Alpine v3.24 hostapd 2.6-r2 —
Alpine v3.24 wpa_supplicant 2.6-r7 —
Alpine v3.23 hostapd 2.6-r2 —
Alpine v3.23 wpa_supplicant 2.6-r7 —
Alpine v3.22 hostapd 2.6-r2 —
Alpine v3.22 wpa_supplicant 2.6-r7 —
Alpine v3.21 hostapd 2.6-r2 —
Alpine v3.21 wpa_supplicant 2.6-r7 —
Alpine v3.20 hostapd 2.6-r2 —
Alpine v3.20 wpa_supplicant 2.6-r7 —
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 hostapd 2.6-r2 —
Alpine v3.19 wpa_supplicant 2.6-r7 —
Alpine v3.18 hostapd 2.6-r2 —
Alpine v3.18 wpa_supplicant 2.6-r7 —
Alpine v3.17 hostapd 2.6-r2 —
Alpine v3.17 wpa_supplicant 2.6-r7 —
Alpine v3.16 hostapd 2.6-r2 —
Alpine v3.16 wpa_supplicant 2.6-r7 —
Alpine v3.15 hostapd 2.6-r2 —
Alpine v3.15 wpa_supplicant 2.6-r7 —
Alpine v3.14 hostapd 2.6-r2 —
Alpine v3.14 wpa_supplicant 2.6-r7 —
Alpine v3.13 hostapd 2.6-r2 —
Alpine v3.13 wpa_supplicant 2.6-r7 —
Alpine v3.12 hostapd 2.6-r2 —
Alpine v3.12 wpa_supplicant 2.6-r7 —
Alpine v3.11 hostapd 2.6-r2 —
Alpine v3.11 wpa_supplicant 2.6-r7 —
Alpine v3.10 hostapd 2.6-r2 —
Alpine v3.10 wpa_supplicant 2.6-r7 —
Alpine v3.9 hostapd 2.6-r2 —
Alpine v3.9 wpa_supplicant 2.6-r7 —
Alpine v3.8 hostapd 2.6-r2 —
Alpine v3.8 wpa_supplicant 2.6-r7 —
Alpine v3.7 hostapd 2.6-r2 —
Alpine v3.7 wpa_supplicant 2.6-r7 —
Alpine v3.6 hostapd 2.6-r2 —
Alpine v3.6 wpa_supplicant 2.6-r4 —
Alpine v3.5 hostapd 2.6-r1 —
Alpine v3.5 wpa_supplicant 2.6-r2 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 wpa_supplicant 1:2.6-5.el7_4.1 ELSA-2017-2907

Advisories 50

References