CVE-2017-13087
Fixed in a distro release EPSS 2%
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
Products: canonical ubuntu_linux, debian_linux, freebsd, opensuse leap, redhat enterprise_linux_desktop, redhat enterprise_linux_server, w1.fi hostapd, w1.fi wpa_supplicant, suse linux_enterprise_desktop, suse linux_enterprise_point_of_sale, suse linux_enterprise_server, suse openstack_cloud
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | hostapd | 2.6-r2 |
| Alpine 3.10 | wpa_supplicant | 2.6-r7 |
| Alpine 3.11 | hostapd | 2.6-r2 |
| Alpine 3.11 | wpa_supplicant | 2.6-r7 |
| Alpine 3.12 | hostapd | 2.6-r2 |
| Alpine 3.12 | wpa_supplicant | 2.6-r7 |
| Alpine 3.13 | hostapd | 2.6-r2 |
| Alpine 3.13 | wpa_supplicant | 2.6-r7 |
| Alpine 3.14 | hostapd | 2.6-r2 |
| Alpine 3.14 | wpa_supplicant | 2.6-r7 |
| Alpine 3.15 | hostapd | 2.6-r2 |
| Alpine 3.15 | wpa_supplicant | 2.6-r7 |
| Alpine 3.16 | hostapd | 2.6-r2 |
| Alpine 3.16 | wpa_supplicant | 2.6-r7 |
| Alpine 3.17 | hostapd | 2.6-r2 |
| Alpine 3.17 | wpa_supplicant | 2.6-r7 |
| Alpine 3.18 | hostapd | 2.6-r2 |
| Alpine 3.18 | wpa_supplicant | 2.6-r7 |
| Alpine 3.19 | hostapd | 2.6-r2 |
| Alpine 3.19 | wpa_supplicant | 2.6-r7 |
| Alpine 3.20 | hostapd | 2.6-r2 |
| Alpine 3.20 | wpa_supplicant | 2.6-r7 |
| Alpine 3.21 | hostapd | 2.6-r2 |
| Alpine 3.21 | wpa_supplicant | 2.6-r7 |
| Alpine 3.22 | hostapd | 2.6-r2 |
| Alpine 3.22 | wpa_supplicant | 2.6-r7 |
| Alpine 3.23 | hostapd | 2.6-r2 |
| Alpine 3.23 | wpa_supplicant | 2.6-r7 |
| Alpine 3.24 | hostapd | 2.6-r2 |
| Alpine 3.24 | wpa_supplicant | 2.6-r7 |
| Alpine 3.5 | hostapd | 2.6-r1 |
| Alpine 3.5 | wpa_supplicant | 2.6-r2 |
| Alpine 3.6 | hostapd | 2.6-r2 |
| Alpine 3.6 | wpa_supplicant | 2.6-r4 |
| Alpine 3.7 | hostapd | 2.6-r2 |
| Alpine 3.7 | wpa_supplicant | 2.6-r7 |
| Alpine 3.8 | hostapd | 2.6-r2 |
| Alpine 3.8 | wpa_supplicant | 2.6-r7 |
| Alpine 3.9 | hostapd | 2.6-r2 |
| Alpine 3.9 | wpa_supplicant | 2.6-r7 |
| Arch Linux | hostapd | 2.6-6 |
| Arch Linux | wpa_supplicant | 1:2.6-11 |
| Debian 12 | wpa | 2:2.4-1.1 |
| Debian 13 | wpa | 2:2.4-1.1 |
| Debian 14 | wpa | 2:2.4-1.1 |
| Debian 7 | wpa | 1.0-3+deb7u5 |
| Debian 8 | wpa | 2.3-1+deb8u5 |
| Debian 9 | wpa | 2:2.4-1+deb9u1 |
| Red Hat Enterprise Linux 6 | wpa_supplicant | 1:0.7.3-9.el6_9.2 |
| Red Hat Enterprise Linux 6 | wpa_supplicant-debuginfo | 1:0.7.3-9.el6_9.2 |
| Red Hat Enterprise Linux 7 | wpa_supplicant | 1:2.6-5.el7_4.1 |
| Red Hat Enterprise Linux 7 | wpa_supplicant-debuginfo | 1:2.6-5.el7_4.1 |
| SUSE HPE Helion OpenStack 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | wpa_supplicant | 0.7.1-6.18.3.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | wpa_supplicant | 0.7.1-6.18.3.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | wpa_supplicant | 0.7.1-6.18.3.1 |
| SUSE Linux Enterprise Server 11 SP4 | wpa_supplicant | 0.7.1-6.18.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP3 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP5 | wpa_supplicant | 2.9-23.3.1 |
| SUSE Linux Enterprise Server 12-LTSS | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server 15-LTSS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | wpa_supplicant | 0.7.1-6.18.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | wpa_supplicant | 2.2-15.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | wpa_supplicant | 2.9-23.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | wpa_supplicant | 2.9-4.20.1 |
| SUSE OpenStack Cloud 6 | wpa_supplicant | 2.2-15.3.1 |
| SUSE OpenStack Cloud 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud 9 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud Crowbar 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud Crowbar 9 | wpa_supplicant | 2.9-15.22.1 |
| Ubuntu 14.04 LTS | wpa | 2.1-0ubuntu1.5 |
| Ubuntu 16.04 LTS | wpa | 2.4-0ubuntu6.2 |
| openSUSE Leap 15.1 | wpa_supplicant | 2.9-lp151.5.10.1 |
| openSUSE Leap 15.2 | wpa_supplicant | 2.9-lp152.8.3.1 |