Red Hat Security AdvisoryRHSA-2017:2907
wpa_supplicant security update
Released 2017-10-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) wpa_supplicant-1:2.6-5.el7_4.1
- Red Hat Enterprise Linux ComputeNode (v. 7) wpa_supplicant-1:2.6-5.el7_4.1
- Red Hat Enterprise Linux Server (v. 7) wpa_supplicant-1:2.6-5.el7_4.1
- Red Hat Enterprise Linux Workstation (v. 7) wpa_supplicant-1:2.6-5.el7_4.1
Fixes 7 records
Priority MEDIUM 43
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within ra…
CVSS 3.0HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.04575 · Published 2017-10-17 · Fixed CWE-323
Priority LOW 35
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames…
CVSS 3.0MEDIUM 6.8· Adjacent network · No auth · No interaction · EPSS 0.02388 · Published 2017-10-17 · Partial fix CWE-330
Priority LOW 34
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS 3.0MEDIUM 6.8· Adjacent network · No auth · No interaction · EPSS 0.02046 · Published 2017-10-17 · Fixed CWE-323
Priority LOW 28
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attac…
CVSS 3.0MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.01807 · Published 2017-10-17 · Fixed CWE-323
Priority LOW 28
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within…
CVSS 3.0MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.01742 · Published 2017-10-17 · Fixed CWE-330
Priority LOW 28
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVSS 3.0MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.02285 · Published 2017-10-17 · Partial fix CWE-323
Priority LOW 28
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVSS 3.0MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.0207 · Published 2017-10-17 · Partial fix CWE-323