Red Hat Security Advisory

RHSA-2017:2911

wpa_supplicant security update

Released 2017-10-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) wpa_supplicant-1:0.7.3-9.el6_9.2
Red Hat Enterprise Linux HPC Node Optional (v. 6) wpa_supplicant-1:0.7.3-9.el6_9.2
Red Hat Enterprise Linux Server (v. 6) wpa_supplicant-1:0.7.3-9.el6_9.2
Red Hat Enterprise Linux Workstation (v. 6) wpa_supplicant-1:0.7.3-9.el6_9.2

Fixes 4 records

TI-2017-09716 CVE-2017-13077 · GHSA-wxv4-3q58-w3mx

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key…

LOW 35

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames…

CVSS 3.0MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.02388 Published 2017-10-17 Partial fix CWE-330

TI-2017-09725 CVE-2017-13087 · GHSA-88jq-244c-4xj3

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…

LOW 28

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within…

CVSS 3.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.01742 Published 2017-10-17 Fixed CWE-330

TI-2017-09719 CVE-2017-13080 · GHSA-jq36-53qv-7v3m

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…

LOW 28

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

CVSS 3.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.02285 Published 2017-10-17 Partial fix CWE-323

TI-2017-09717 CVE-2017-13078 · GHSA-5fh3-v3jw-rc9h

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…

LOW 28

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

CVSS 3.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.0207 Published 2017-10-17 Partial fix CWE-323