Description
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wi-Fi Alliance | Wi-Fi Protected Access (WPA and WPA2) | WPA, WPA2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wpa | No fix yet | — |
| Debian 13 | wpa | No fix yet | — |
| Debian 12 | wpa | No fix yet | — |
Advisories 2
- WID-SEC-2025-0369 IEEE WPA2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2025
- ICSA-17-318-01 ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F) CISA ICS & IT advisories · Apr 9, 2019
References
- 1039581 vdb-entry
- 101274 vdb-entry
- https://access.redhat.com/security/vulnerabilities/kracks
- 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II vendor-advisory
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
- 1039577 vdb-entry
- GLSA-201711-03 vendor-advisory
- https://support.lenovo.com/us/en/product_security/LEN-17420
- https://www.krackattacks.com/
- 1039576 vdb-entry
- VU#228519 third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf