Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…
Priority LOW 28CWE-323Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Why it matters now
EPSS 0.02124 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Wi-Fi Alliance | Wi-Fi Protected Access (WPA and WPA2) | WPA; WPA2 | — | No fix listed | CNA |
- Wi-Fi Protected Access (WPA and WPA2) VendorWi-Fi Alliance Affected WPA; WPA2 Fixed in — No fix listed CNA
CPE configurations NVD · 85
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:* | 17.04 | Vulnerable | Canonical |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:* | all versions | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:* | 10 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:* | 10.4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:* | 11 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:* | 11.1 | Vulnerable | FreeBSD |
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:* Versions 17.04 Vulnerable ·Canonical
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:* Versions 10.4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·FreeBSD
Show 75 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:* | 42.2 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:* | 42.3 | Vulnerable | openSUSE |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:* | 7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:* | 7 | Vulnerable | Red Hat |
| cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:* | 0.2.4 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:* | 0.2.5 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:* | 0.2.6 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:* | 0.2.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:* | 0.3.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:* | 0.3.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:* | 0.3.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:* | 0.3.11 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:* | 0.4.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:* | 0.4.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:* | 0.4.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:* | 0.4.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:* | 0.4.11 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:* | 0.5.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:* | 0.5.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:* | 0.5.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:* | 0.5.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:* | 0.5.11 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:* | 0.6.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:* | 0.6.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:* | 0.6.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:* | 0.7.3 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:* | 2.3 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:* | 2.5 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:* | 2.6 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:* | 0.2.4 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:* | 0.2.5 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:* | 0.2.6 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:* | 0.2.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:* | 0.2.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:* | 0.3.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:* | 0.3.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:* | 0.3.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:* | 0.3.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:* | 0.3.11 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:* | 0.4.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:* | 0.4.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:* | 0.4.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:* | 0.4.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:* | 0.4.11 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:* | 0.5.7 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:* | 0.5.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:* | 0.5.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:* | 0.5.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:* | 0.5.11 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:* | 0.6.8 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:* | 0.6.9 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:* | 0.6.10 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:* | 0.7.3 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:* | 2.3 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:* | 2.5 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:* | 2.6 | Vulnerable | Wi-Fi Alliance |
| cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:* | 12 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:* | 12 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:* | 6 | Vulnerable | SUSE |
- cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:* Versions 42.2 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:* Versions 42.3 Vulnerable ·openSUSE
- cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Red Hat
- cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:* Versions 0.2.4 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:* Versions 0.2.5 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:* Versions 0.2.6 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:* Versions 0.2.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:* Versions 0.3.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:* Versions 0.3.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:* Versions 0.3.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:* Versions 0.3.11 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:* Versions 0.4.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:* Versions 0.4.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:* Versions 0.4.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:* Versions 0.4.11 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:* Versions 0.5.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:* Versions 0.5.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:* Versions 0.5.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:* Versions 0.5.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:* Versions 0.5.11 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:* Versions 0.6.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:* Versions 0.6.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:* Versions 0.6.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:* Versions 0.2.4 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:* Versions 0.2.5 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:* Versions 0.2.6 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:* Versions 0.2.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:* Versions 0.2.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:* Versions 0.3.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:* Versions 0.3.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:* Versions 0.3.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:* Versions 0.3.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:* Versions 0.3.11 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:* Versions 0.4.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:* Versions 0.4.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:* Versions 0.4.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:* Versions 0.4.11 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:* Versions 0.5.7 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:* Versions 0.5.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:* Versions 0.5.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:* Versions 0.5.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:* Versions 0.5.11 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:* Versions 0.6.8 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:* Versions 0.6.9 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:* Versions 0.6.10 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Wi-Fi Alliance
- cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:* Versions 12 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:* Versions 12 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:* Versions 6 Vulnerable ·SUSE
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — GLSA-201711-03
9 records Highest priority Priority MEDIUM 1 MEDIUM, 8 LOW
Other records, highest priority first
- TI-2017-09721 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of…Priority MEDIUM 43
- TI-2017-09716 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key…Priority LOW 35
- TI-2017-09724 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link…Priority LOW 34
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
9 records Highest priority Priority MEDIUM 1 MEDIUM, 8 LOW
Other records, highest priority first
- TI-2017-09721 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of…Priority MEDIUM 43
- TI-2017-09716 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key…Priority LOW 35
- TI-2017-09724 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link…Priority LOW 34
Show 5 more groups
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — DSA-3999
8 records Highest priority Priority MEDIUM 1 MEDIUM, 7 LOW
Other records, highest priority first
- TI-2017-09721 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of…Priority MEDIUM 43
- TI-2017-09716 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key…Priority LOW 35
- TI-2017-09724 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link…Priority LOW 34
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — FreeBSD-SA-17:07
8 records Highest priority Priority MEDIUM 1 MEDIUM, 7 LOW
Other records, highest priority first
- TI-2017-09721 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of…Priority MEDIUM 43
- TI-2017-09716 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key…Priority LOW 35
- TI-2017-09724 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link…Priority LOW 34
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — SUSE-SU-2017:2745
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2017-09726 Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…Priority LOW 28
- TI-2017-09720 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…Priority LOW 28
- TI-2017-09719 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…Priority LOW 28
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — SUSE-SU-2017:2752
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2017-09726 Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…Priority LOW 28
- TI-2017-09720 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…Priority LOW 28
- TI-2017-09719 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…Priority LOW 28
- Advisory ·
Wi-Fi Protected Access (WPA and WPA2) — openSUSE-SU-2017:2755
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2017-09726 Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…Priority LOW 28
- TI-2017-09720 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…Priority LOW 28
- TI-2017-09719 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…Priority LOW 28
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 3 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Timeline
- 2026-10-02 Threatist record created from CVE-2017-13079
- 2026-10-03 Alias added: GHSA-gh8r-7rf7-w4rg
References
Advisory 14
- SUSE-SU-2017:2745
- DSA-3999
- https://access.redhat.com/security/vulnerabilities/kracks
- 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt
- openSUSE-SU-2017:2755
- GLSA-201711-03
- https://support.lenovo.com/us/en/product_security/LEN-17420
- FreeBSD-SA-17:07
- https://www.krackattacks.com/
- SUSE-SU-2017:2752
- VU#228519
- USN-3455-1
Other 6
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us
- https://source.android.com/security/bulletin/2017-11-01
- [debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
- https://cert.vde.com/en-us/advisories/vde-2017-005
More Wi-Fi Alliance Hostapd vulnerabilities
- TI-2020-10094 The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the… CVSS 3.1HIGH 7.5
- TI-2022-07426 The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are… CVSS 3.1CRITICAL 9.8
- TI-2022-07427 The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are… CVSS 3.1CRITICAL 9.8
- TI-2019-06933 Improper authentication in Wi-Fi Alliance hostapd with EAP-pwd support CVSS 3.0HIGH 8.1
- TI-2017-09721 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of… CVSS 3.0HIGH 8.1
- TI-2019-06935 Origin validation error in Wi-Fi Alliance hostapd with EAP-pwd support CVSS 3.1HIGH 8.1
Sources
- CVE-2017-13079 · CVE Program
- CVE-2017-13079 · NVD
- FIRST EPSS
- GHSA-gh8r-7rf7-w4rg · GitHub Advisory Database · CC BY 4.0
- CVE-2017-13079 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences