UBUNTU-CVE-2017-13082

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2017-13082

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-13082.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-13082

Related

Published

2017-10-16T00:00:00Z

Modified

2017-10-16T00:00:00Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

References

Affected packages

Ubuntu:14.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1-0ubuntu1.5

Affected versions

1.*

1.0-3ubuntu2

1.0-3ubuntu3

1.0-3ubuntu4

2.*

2.1-0ubuntu1

2.1-0ubuntu1.1

2.1-0ubuntu1.2

2.1-0ubuntu1.3

2.1-0ubuntu1.4

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_version": "1:2.1-0ubuntu1.5",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "1:2.1-0ubuntu1.5",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2.1-0ubuntu1.5",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2.1-0ubuntu1.5",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2.1-0ubuntu1.5",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2.1-0ubuntu1.5",
            "binary_name": "wpasupplicant-dbgsym"
        },
        {
            "binary_version": "2.1-0ubuntu1.5",
            "binary_name": "wpasupplicant-udeb"
        },
        {
            "binary_version": "2.1-0ubuntu1.5",
            "binary_name": "wpasupplicant-udeb-dbgsym"
        }
    ]
}

Ubuntu:16.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4-0ubuntu6.2

Affected versions

2.*

2.4-0ubuntu3

2.4-0ubuntu4

2.4-0ubuntu5

2.4-0ubuntu6

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_version": "1:2.4-0ubuntu6.2",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "1:2.4-0ubuntu6.2",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2.4-0ubuntu6.2",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2.4-0ubuntu6.2",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2.4-0ubuntu6.2",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2.4-0ubuntu6.2",
            "binary_name": "wpasupplicant-dbgsym"
        },
        {
            "binary_version": "2.4-0ubuntu6.2",
            "binary_name": "wpasupplicant-udeb"
        },
        {
            "binary_version": "2.4-0ubuntu6.2",
            "binary_name": "wpasupplicant-udeb-dbgsym"
        }
    ]
}