Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-13077
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | Wi-Fi Alliance | Wi-Fi Protected Access (WPA and WPA2) |
Version: WPA Version: WPA2 |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T18:58:12.291Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "1039581", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039581" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208221" }, { "name": "101274", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/101274" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html" }, { "name": "DSA-3999", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2017/dsa-3999" }, { "name": "1039578", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039578" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "name": "1041432", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1041432" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://source.android.com/security/bulletin/2018-04-01" }, { "name": "20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II", "tags": [ "vendor-advisory", "x_refsource_CISCO", "x_transferred" ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa" }, { "name": "RHSA-2017:2911", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:2911" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt" }, { "name": "1039577", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039577" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03792en_us" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208222" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://source.android.com/security/bulletin/2017-11-01" }, { "name": "GLSA-201711-03", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201711-03" }, { "name": "RHSA-2017:2907", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:2907" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-17420" }, { "name": "FreeBSD-SA-17:07", "tags": [ "vendor-advisory", "x_refsource_FREEBSD", "x_transferred" ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.krackattacks.com/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "1039573", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039573" }, { "name": "1039576", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039576" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2017-003" }, { "name": "1039585", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039585" }, { "name": "VU#228519", "tags": [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred" ], "url": "http://www.kb.cert.org/vuls/id/228519" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208220" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://source.android.com/security/bulletin/2018-06-01" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208219" }, { "name": "[debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://cert.vde.com/en-us/advisories/vde-2017-005" }, { "name": "USN-3455-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "http://www.ubuntu.com/usn/USN-3455-1" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Wi-Fi Protected Access (WPA and WPA2)", "vendor": "Wi-Fi Alliance", "versions": [ { "status": "affected", "version": "WPA" }, { "status": "affected", "version": "WPA2" } ] } ], "datePublic": "2017-10-16T00:00:00", "descriptions": [ { "lang": "en", "value": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-11-13T10:57:01", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc" }, "references": [ { "name": "1039581", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039581" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208221" }, { "name": "101274", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/101274" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html" }, { "name": "DSA-3999", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2017/dsa-3999" }, { "name": "1039578", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039578" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "name": "1041432", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1041432" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://source.android.com/security/bulletin/2018-04-01" }, { "name": "20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II", "tags": [ "vendor-advisory", "x_refsource_CISCO" ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa" }, { "name": "RHSA-2017:2911", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:2911" }, { "tags": [ "x_refsource_MISC" ], "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt" }, { "name": "1039577", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039577" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03792en_us" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208222" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://source.android.com/security/bulletin/2017-11-01" }, { "name": "GLSA-201711-03", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201711-03" }, { "name": "RHSA-2017:2907", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:2907" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-17420" }, { "name": "FreeBSD-SA-17:07", "tags": [ "vendor-advisory", "x_refsource_FREEBSD" ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.krackattacks.com/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "1039573", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039573" }, { "name": "1039576", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039576" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2017-003" }, { "name": "1039585", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039585" }, { "name": "VU#228519", "tags": [ "third-party-advisory", "x_refsource_CERT-VN" ], "url": "http://www.kb.cert.org/vuls/id/228519" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208220" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://source.android.com/security/bulletin/2018-06-01" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208219" }, { "name": "[debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://cert.vde.com/en-us/advisories/vde-2017-005" }, { "name": "USN-3455-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "http://www.ubuntu.com/usn/USN-3455-1" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cert@cert.org", "ID": "CVE-2017-13077", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Wi-Fi Protected Access (WPA and WPA2)", "version": { "version_data": [ { "version_value": "WPA" }, { "version_value": "WPA2" } ] } } ] }, "vendor_name": "Wi-Fi Alliance" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "1039581", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039581" }, { "name": "https://support.apple.com/HT208221", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208221" }, { "name": "101274", "refsource": "BID", "url": "http://www.securityfocus.com/bid/101274" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html" }, { "name": "DSA-3999", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-3999" }, { "name": "1039578", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039578" }, { "name": "https://access.redhat.com/security/vulnerabilities/kracks", "refsource": "CONFIRM", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "name": "1041432", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1041432" }, { "name": "https://source.android.com/security/bulletin/2018-04-01", "refsource": "CONFIRM", "url": "https://source.android.com/security/bulletin/2018-04-01" }, { "name": "20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II", "refsource": "CISCO", "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa" }, { "name": "RHSA-2017:2911", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2911" }, { "name": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "refsource": "MISC", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt", "refsource": "CONFIRM", "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt" }, { "name": "1039577", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039577" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03792en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03792en_us" }, { "name": "https://support.apple.com/HT208222", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208222" }, { "name": "https://source.android.com/security/bulletin/2017-11-01", "refsource": "CONFIRM", "url": "https://source.android.com/security/bulletin/2017-11-01" }, { "name": "GLSA-201711-03", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201711-03" }, { "name": "RHSA-2017:2907", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2907" }, { "name": "https://support.lenovo.com/us/en/product_security/LEN-17420", "refsource": "CONFIRM", "url": "https://support.lenovo.com/us/en/product_security/LEN-17420" }, { "name": "FreeBSD-SA-17:07", "refsource": "FREEBSD", "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc" }, { "name": "https://www.krackattacks.com/", "refsource": "MISC", "url": "https://www.krackattacks.com/" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "1039573", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039573" }, { "name": "1039576", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039576" }, { "name": "https://cert.vde.com/en-us/advisories/vde-2017-003", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2017-003" }, { "name": "1039585", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039585" }, { "name": "VU#228519", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/228519" }, { "name": "https://support.apple.com/HT208220", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208220" }, { "name": "https://source.android.com/security/bulletin/2018-06-01", "refsource": "CONFIRM", "url": "https://source.android.com/security/bulletin/2018-06-01" }, { "name": "https://support.apple.com/HT208219", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208219" }, { "name": "[debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html" }, { "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf", "refsource": "CONFIRM", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf" }, { "name": "https://cert.vde.com/en-us/advisories/vde-2017-005", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2017-005" }, { "name": "USN-3455-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-3455-1" } ] } } } }, "cveMetadata": { "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2017-13077", "datePublished": "2017-10-17T02:00:00", "dateReserved": "2017-08-22T00:00:00", "dateUpdated": "2024-08-05T18:58:12.291Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2017-13077\",\"sourceIdentifier\":\"cret@cert.org\",\"published\":\"2017-10-17T02:29:00.207\",\"lastModified\":\"2024-11-21T03:10:54.670\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.\"},{\"lang\":\"es\",\"value\":\"Wi-Fi Protected Access (WPA y WPA2) permite la reinstalaci\u00f3n de la clave temporal (TK) PTK (Pairwise Transient Key) durante la negociaci\u00f3n en cuatro pasos, haciendo que un atacante que se sit\u00fae entro del radio responda, descifre o suplante frames.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.6,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":5.4,\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":5.5,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-330\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"588D4F37-0A56-47A4-B710-4D5F3D214FB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9EC02F3-3905-460D-8949-3B26394215CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4195DB45-CF5A-4FA6-BF58-BAF77EE555C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD5B9266-A927-4F62-8742-721CE9A4C4C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"602D3280-2974-4809-BE70-1EA9437AEBF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5753931-556B-4EEC-B510-751BA3613CE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2095C863-1FB0-4016-81FF-3CAB44E77FD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC7AAFCB-AB64-4B39-87AA-936E386A82C2\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6454F0F-6CC1-4EA2-8D7C-51709FD7F318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFCB5512-B60E-48D7-B136-ADF19E5E74BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EB1420D-5D05-4BFC-8AF7-2AB00B76148B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21324D89-B634-4D6B-987B-4AD29079373D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AB43314-8725-48A0-8902-864567808AD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2AA3D0E-C483-4575-8209-DE643A3FEC7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1212B910-E4A5-47A1-A263-4E1C13CF3EFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9A6A99E-5129-4E8D-A0AF-61755BDA3565\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC42F782-63CB-4960-BF65-4856776CFBE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"212B0353-4AEF-4861-A054-6193CAA05390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E702507-5BA0-4A12-80C6-A729F32A6A80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24810936-DABC-485D-B952-22F16C3016FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AF46881-4484-4ABB-AC0C-152664E2CD6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"880CBDD7-BFEC-48F6-8C4C-D300143B6571\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B29CCA41-5784-48C3-B9ED-6B1FF063FB1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37B9643D-4046-4034-8B68-18F59154CD66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"681C458F-D1BD-48DA-86C7-BA714F5AA9B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4057F722-1A8E-4D75-B049-E3632AC8EF65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1F53FDB-7136-444E-AB03-9D8A6A31E249\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63AB46C0-2F00-4805-84A9-323BA4E594DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06119A43-B1CA-4021-87D2-C67BE6125423\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"768D16AF-3A8B-47DD-A499-948A73062AE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BECC3EF-2777-4FF9-9750-93D1245A9247\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2D07095-6331-4079-BD86-E414CEE35624\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61CDB3D2-F6C3-43CF-ACE8-95E96DF02293\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B4681FC-44F4-4E86-8431-8EDAD65492D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC6FB535-AFFF-4083-AF1D-9E1ED504158F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A74105F9-E729-47BA-A96F-4D15947B673A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F5F7411-0B32-4041-8235-2B1AEC186FF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9191D783-4390-4603-9C4D-F673270E63C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E36F3308-EABA-451F-90E1-65919450A809\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44F6680B-7015-4EB0-AABC-A4DD50894CD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CAFF5E3-EA27-4688-87AD-1648003D3D1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E00A5B5-81D8-4BF3-B857-028D7D06CA5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"476C3ED0-B77C-490F-AF1E-BC4C7D52D818\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B1972B5-F896-419C-9FFA-FB583B114B8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2E84533-EB76-4A8F-90ED-E9342EAF3427\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5AE0623-87CB-4CEF-BD3B-6BCF676031CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"905B55A4-2488-44D1-991F-C142C3527F18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90102D17-8D03-4F59-811B-FBFB98D627C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9381F69-1633-44DD-967F-D29587B67079\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9169BDAC-6207-4B6A-8EF3-D52DED1A9311\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62E17E03-53C6-4E74-91A8-4C4363666291\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4C6FEDE-B0E9-479A-9185-48D62DBC91FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"643762E2-969E-4531-B79E-961697E5DA8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"627AD871-2091-48E9-B801-3E3D5CF8E594\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BC691E5-6265-4FAB-9ACA-C65EB99AFA47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4701BF31-B3FC-4590-9787-3BA94ECB8D54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DB96005-E214-4C60-865E-B693115527D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF264-2315-43CE-B2A6-4234B394854C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3EF53AD-F985-446E-89B8-4BFECE00AD63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A11DBFA-9F0E-4358-8541-E5371C11FE80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"738AEB08-FF7D-4DC3-AB14-B8F2B9474810\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E8C5523-16E4-417E-A159-F5D0F9E83C5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB93C2FC-6913-448E-8B93-EEB2229EC86C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0ECA3172-7088-4B5E-923D-37B155729BD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48FD6B1B-7555-449D-9CCB-1487FAEE8098\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9726F4DE-8037-49AD-A092-7EF9D5BF99EC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"57CFAD92-EECD-417D-ADDB-8178C320B204\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1DCD75C-9775-4922-8A44-C4707C640946\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"086BF5C5-255C-4E2E-83D3-A8B83AED6B60\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*\",\"matchCriteriaId\":\"91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*\",\"matchCriteriaId\":\"B2F3699A-38E4-4E9D-9414-411F71D9E371\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D\"}]}]}],\"references\":[{\"url\":\"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2017/dsa-3999\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/228519\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://www.securityfocus.com/bid/101274\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039573\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039576\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039577\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039578\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039581\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039585\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041432\",\"source\":\"cret@cert.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3455-1\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2907\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2911\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/security/vulnerabilities/kracks\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf\",\"source\":\"cret@cert.org\"},{\"url\":\"https://cert.vde.com/en-us/advisories/vde-2017-003\",\"source\":\"cret@cert.org\"},{\"url\":\"https://cert.vde.com/en-us/advisories/vde-2017-005\",\"source\":\"cret@cert.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html\",\"source\":\"cret@cert.org\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201711-03\",\"source\":\"cret@cert.org\"},{\"url\":\"https://source.android.com/security/bulletin/2017-11-01\",\"source\":\"cret@cert.org\"},{\"url\":\"https://source.android.com/security/bulletin/2018-04-01\",\"source\":\"cret@cert.org\"},{\"url\":\"https://source.android.com/security/bulletin/2018-06-01\",\"source\":\"cret@cert.org\"},{\"url\":\"https://support.apple.com/HT208219\",\"source\":\"cret@cert.org\"},{\"url\":\"https://support.apple.com/HT208220\",\"source\":\"cret@cert.org\"},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"cret@cert.org\"},{\"url\":\"https://support.apple.com/HT208222\",\"source\":\"cret@cert.org\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03792en_us\",\"source\":\"cret@cert.org\"},{\"url\":\"https://support.lenovo.com/us/en/product_security/LEN-17420\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.krackattacks.com/\",\"source\":\"cret@cert.org\",\"tags\":[\"Technical Description\",\"Third Party Advisory\"]},{\"url\":\"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2017/dsa-3999\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/228519\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/101274\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039573\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039576\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039577\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039578\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039581\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039585\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041432\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3455-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2907\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2911\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/security/vulnerabilities/kracks\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert.vde.com/en-us/advisories/vde-2017-003\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert.vde.com/en-us/advisories/vde-2017-005\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201711-03\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://source.android.com/security/bulletin/2017-11-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://source.android.com/security/bulletin/2018-04-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://source.android.com/security/bulletin/2018-06-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT208219\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT208220\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT208222\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03792en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.lenovo.com/us/en/product_security/LEN-17420\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.krackattacks.com/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Technical Description\",\"Third Party Advisory\"]}]}}" } }
ICSMA-19-029-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet", "summary": "discovering the KRACK vulnerabilities" }, { "organization": "KU Leuven", "summary": "discovering the KRACK vulnerabilities" }, { "names": [ "Stryker" ], "summary": "reporting to NCCIC that the KRACK vulnerabilities may possibly affect these products" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.", "title": "Risk evaluation" }, { "category": "other", "text": "Healthcare and Public Health", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "United States", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "This vulnerability is exploitable from an adjacent network. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSMA-19-029-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsma-19-029-01.json" }, { "category": "self", "summary": "ICS Advisory ICSMA-19-029-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-029-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Stryker Medical Beds", "tracking": { "current_release_date": "2019-01-29T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSMA-19-029-01", "initial_release_date": "2019-01-29T00:00:00.000000Z", "revision_history": [ { "date": "2019-01-29T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSMA-19-029-01 Stryker Medical Beds" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "3002 S3 | 3005 S3", "product": { "name": "S3 MedSurg Bed (enabled with iBed Wireless): Models 3002 S3 and 3005 S3", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "S3 MedSurg Bed (enabled with iBed Wireless)" }, { "branches": [ { "category": "product_version", "name": "3002", "product": { "name": "Secure II MedSurg Bed (enabled with iBed Wireless): Model 3002", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Secure II MedSurg Bed (enabled with iBed Wireless)" }, { "branches": [ { "category": "product_version", "name": "2131 and 2141", "product": { "name": "InTouch ICU Bed (enabled with Bed Wireless): Models 2131 and 2141", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "InTouch ICU Bed (enabled with Bed Wireless)" } ], "category": "vendor", "name": "Stryker" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "An industry-wide vulnerability exists in the WPA and WPA2 protocol affected by the Key Reinstallation Attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse, resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames. The following CVEs have been assigned to this group of vulnerabilities: CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.. CVE-2017-13078: Reinstallation of the group key during the four-way handshake. CVE-2017-13078: Reinstallation of the group key during the four-way handshake.. CVE-2017-13079: Reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake.CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "vendor_fix", "details": "Stryker has released software updates for affected products to mitigate the KRACK vulnerabilities.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "Stryker recommends users take additional defensive measures to minimize the risk of exploitation. Specifically, users should:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "For additional questions, users can call 1-800-STRYKER, option 2 for Stryker Medical Technical Support.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ] } ] }
ICSA-17-318-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "the Katholieke Universiteit Leuven in Belgium", "summary": "discovering these vulnerabilities" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "summary", "text": "Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.", "title": "Summary" }, { "category": "other", "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "CISAservicedesk@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-318-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-318-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-01" } ], "title": "ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)", "tracking": { "current_release_date": "2019-04-09T00:00:00.000000Z", "generator": { "engine": { "name": "CISA USCert CSAF Generator", "version": "1" } }, "id": "ICSA-17-318-01", "initial_release_date": "2017-11-14T00:00:00.000000Z", "revision_history": [ { "date": "2017-11-14T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products" }, { "date": "2017-12-05T00:00:00.000000Z", "legacy_version": "A", "number": "2", "summary": "ICSA-17-318-01A Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update A)" }, { "date": "2017-12-19T00:00:00.000000Z", "legacy_version": "B", "number": "3", "summary": "ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update B)" }, { "date": "2018-01-25T00:00:00.000000Z", "legacy_version": "C", "number": "4", "summary": "ICSA-17-318-01C Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)" }, { "date": "2018-04-24T00:00:00.000000Z", "legacy_version": "D", "number": "5", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update D)" }, { "date": "2018-11-13T00:00:00.000000Z", "legacy_version": "E", "number": "6", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update E)" }, { "date": "2019-04-09T00:00:00.000000Z", "legacy_version": "F", "number": "7", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)" } ], "status": "final", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c 22.3.5.16", "product": { "name": "SIMATIC RF650M: All versions with Summit Client Utility prior to v22.3.5.16", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "SIMATIC RF650M" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SCALANCE W-700 (IEEE 802.11a/b/g): All versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "SCALANCE W-700 (IEEE 802.11a/b/g)" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SIMATIC Mobile Panel 277(F) IWLAN: All versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "SIMATIC Mobile Panel 277(F) IWLAN" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "RUGGEDCOM RS9xxW: All versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "RUGGEDCOM RS9xxW" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 22.3.5.16", "product": { "name": "SIMATIC RF350M: All versions with Summit Client Utility prior to v22.3.5.16", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "SIMATIC RF350M" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 01.03.01", "product": { "name": "SINAMICS v20 Smart Access Module: All versions prior to v01.03.01", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "SINAMICS v20 Smart Access Module" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 9.21.19.003", "product": { "name": "SCALANCE WLC712: All versions prior to v9.21.19.003", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "SCALANCE WLC712" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 6.2.1", "product": { "name": "SCALANCE W-700 (IEEE 802.11n): All versions prior to v6.2.1", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "SCALANCE W-700 (IEEE 802.11n)" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 6.5.1.5-4.3.1.8", "product": { "name": "SCALANCE W1750D: All versions prior to v6.5.1.5-4.3.1.8", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "SCALANCE W1750D" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 2.11.2", "product": { "name": "RUGGEDCOM RX1400 with WLAN interface: All versions prior to v2.11.2", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "RUGGEDCOM RX1400 with WLAN interface" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SIMATIC IWLAN-PB/LINK: All versions", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "SIMATIC IWLAN-PB/LINK" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 9.21.19.003", "product": { "name": "SCALANCE WLC711: All versions prior to v9.21.19.003", "product_id": "CSAFPID-00012" } } ], "category": "product_name", "name": "SCALANCE WLC711" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN: All versions", "product_id": "CSAFPID-00013" } } ], "category": "product_name", "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the pairwise key in the four-way handshake.CVE-2017-13077 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13077" }, { "cve": "CVE-2017-13078", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13078 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13078" }, { "cve": "CVE-2017-13079", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13079 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13079" }, { "cve": "CVE-2017-13080", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13080 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13080" }, { "cve": "CVE-2017-13081", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13081 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13081" }, { "cve": "CVE-2017-13082", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the pairwise transient key (PTK) temporal key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13082 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13082" }, { "cve": "CVE-2017-13084", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the station-to-station-link (STSL) transient key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13084 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13084" }, { "cve": "CVE-2017-13086", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the tunneled direct-link setup (TDLS) peer key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13086 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13086" }, { "cve": "CVE-2017-13087", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the group temporal key (GTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13087 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13087" }, { "cve": "CVE-2017-13088", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the integrity group temporal key (IGTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13088 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13088" } ] }
icsma-18-114-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet, KU Leuven", "summary": "discovering the KRACK vulnerabilities" }, { "names": [ "BD" ], "summary": "reporting to NCCIC that the KRACK vulnerabilities may possibly affect these products" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.", "title": "Risk evaluation" }, { "category": "other", "text": "Healthcare and Public Health", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "New Jersey", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS-CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.", "title": "Recommended Practices" }, { "category": "general", "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSMA-18-114-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsma-18-114-01.json" }, { "category": "self", "summary": "ICS Advisory ICSMA-18-114-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-114-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-114-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" } ], "title": "BD Pyxis", "tracking": { "current_release_date": "2018-04-24T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSMA-18-114-01", "initial_release_date": "2018-04-24T00:00:00.000000Z", "revision_history": [ { "date": "2018-04-24T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSMA-18-114-01 BD Pyxis" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia ES,", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "BD Pyxis Anesthesia ES" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia System 4000,", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "BD Pyxis Anesthesia System 4000" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia System 3500,", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "BD Pyxis Anesthesia System 3500" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis MedStation 4000 T2,", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "BD Pyxis MedStation 4000 T2" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis MedStation ES,", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "BD Pyxis MedStation ES" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis SupplyStation,", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "BD Pyxis SupplyStation" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Supply Roller,", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "BD Pyxis SupplyRoller" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis ParAssist System,", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "BD Pyxis ParAssist System" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis PARx,", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "BD Pyxis PARx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis CIISafe - Workstation,", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "BD Pyxis CIISafe - Workstation" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis StockStation System, and", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "BD Pyxis StockStation System" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Parx handheld", "product_id": "CSAFPID-00012" } } ], "category": "product_name", "name": "BD Pyxis Parx handheld" } ], "category": "vendor", "name": "Becton, Dickinson and Company (BD)" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "An industry-wide vulnerability exists in the WPA and WPA2 protocol affected by the Key Reinstallation Attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames. The following CVEs have been assigned to this group of vulnerabilities: CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.. CVE-2017-13078: Reinstallation of the group key during the four-way handshake. CVE-2017-13078: Reinstallation of the group key during the four-way handshake.. CVE-2017-13079: Reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake.CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "vendor_fix", "details": "BD has implemented third-party vendor patches through BD\u0027s routine patch deployment process that resolves these vulnerabilities for most devices. Some devices require coordination with BD. BD is in the process of contacting users to schedule and deploy patches. There is currently no reported verified instance of the KRACK vulnerability being exploited maliciously against BD devices.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, { "category": "vendor_fix", "details": "Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, { "category": "vendor_fix", "details": "BD has published a product security bulletin to notify users about this issue and to provide additional mitigation counsel. It can be found at the following location on their web page:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, { "category": "vendor_fix", "details": "http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-wpa2-krack-wi-fi-vulnerability", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ], "url": "http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-wpa2-krack-wi-fi-vulnerability" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] } ] } ] }
ICSA-17-318-02A
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "the Katholieke Universiteit Leuven in Belgium", "summary": "discovering this vulnerability" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Vendor: ABB", "title": "Risk evaluation" }, { "category": "other", "text": "Critical Manufacturing, Energy", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Switzerland", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ICS-CERT for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from adjacent networks. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-318-02A JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-02a.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-318-02A Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-02a" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-02a" } ], "title": "ABB TropOS (Update A)", "tracking": { "current_release_date": "2018-02-15T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-17-318-02A", "initial_release_date": "2017-11-14T00:00:00.000000Z", "revision_history": [ { "date": "2017-11-14T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-318-02 ABB TropOS" }, { "date": "2018-02-15T00:00:00.000000Z", "legacy_version": "A", "number": "2", "summary": "ICSA-17-318-02A ABB TropOS (Update A)" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c= 8.5.2", "product": { "name": "TropOS Mesh OS: release 8.5.2 or prior", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "TropOS Mesh OS" } ], "category": "vendor", "name": "ABB" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-326", "name": "Inadequate Encryption Strength" }, "notes": [ { "category": "summary", "text": "An industry-wide vulnerability exists in the WPA2 key management algorithm devices that use IEEE 802.11w, including the TropOS broadband mesh routers listed above. The vulnerability may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network.The following CVEs have been assigned to this group of vulnerabilities:", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" } ], "remediations": [ { "category": "mitigation", "details": "ABB has released Mesh OS version 8.5.3 to address these vulnerabilities.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "ABB has released an advisory (1KHW02890) on their alerts and notification page:", "product_ids": [ "CSAFPID-0001" ], "url": "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW02890\u0026Action=Launch" }, { "category": "mitigation", "details": "ABB is working on remedial actions for all affected products.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "ABB has released an advisory (1KHW02890) on their alerts and notification page:", "product_ids": [ "CSAFPID-0001" ], "url": "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW02890\u0026Action=Launch" }, { "category": "mitigation", "details": "This advisory will be updated when firmware, including remedial measures, is available.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "The TropOS mesh wireless interfaces are not vulnerable. Wired client interfaces (Ethernet, Serial) are not vulnerable. An attacker must be in physical proximity of the Wi-Fi access point and connected client to be successful. If the communication across the Wi-Fi link is encrypted at Layer 3 (e.g., SSH, SSL, HTTPS, or SNMPv3 encrypted), privacy is maintained during an otherwise successful attack. If possible, encrypt communication across the Wi-Fi link at Layer 3 using SSH, SSL, HTTPS, or SNMPv3. There is no complete workaround which allows protected Wi-Fi access to the TropOS Mesh.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "ABB users with a current Complete Software Care or Complete Software + Hardware Care subscription are advised to contact ABB Wireless support on phone +1(408) 331 6800, ext. 4, or email tropos.support@nam.abb.com.", "product_ids": [ "CSAFPID-0001" ], "url": "mailto:tropos.support@nam.abb.com" } ] } ] }
ICSMA-18-114-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet, KU Leuven", "summary": "discovering the KRACK vulnerabilities" }, { "names": [ "BD" ], "summary": "reporting to NCCIC that the KRACK vulnerabilities may possibly affect these products" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.", "title": "Risk evaluation" }, { "category": "other", "text": "Healthcare and Public Health", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "New Jersey", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS-CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.", "title": "Recommended Practices" }, { "category": "general", "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSMA-18-114-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsma-18-114-01.json" }, { "category": "self", "summary": "ICS Advisory ICSMA-18-114-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-114-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-114-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" } ], "title": "BD Pyxis", "tracking": { "current_release_date": "2018-04-24T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSMA-18-114-01", "initial_release_date": "2018-04-24T00:00:00.000000Z", "revision_history": [ { "date": "2018-04-24T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSMA-18-114-01 BD Pyxis" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia ES,", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "BD Pyxis Anesthesia ES" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia System 4000,", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "BD Pyxis Anesthesia System 4000" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia System 3500,", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "BD Pyxis Anesthesia System 3500" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis MedStation 4000 T2,", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "BD Pyxis MedStation 4000 T2" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis MedStation ES,", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "BD Pyxis MedStation ES" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis SupplyStation,", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "BD Pyxis SupplyStation" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Supply Roller,", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "BD Pyxis SupplyRoller" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis ParAssist System,", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "BD Pyxis ParAssist System" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis PARx,", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "BD Pyxis PARx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis CIISafe - Workstation,", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "BD Pyxis CIISafe - Workstation" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis StockStation System, and", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "BD Pyxis StockStation System" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Certain BD Pyxis Products - BD Pyxis Parx handheld", "product_id": "CSAFPID-00012" } } ], "category": "product_name", "name": "BD Pyxis Parx handheld" } ], "category": "vendor", "name": "Becton, Dickinson and Company (BD)" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "An industry-wide vulnerability exists in the WPA and WPA2 protocol affected by the Key Reinstallation Attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames. The following CVEs have been assigned to this group of vulnerabilities: CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.. CVE-2017-13078: Reinstallation of the group key during the four-way handshake. CVE-2017-13078: Reinstallation of the group key during the four-way handshake.. CVE-2017-13079: Reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake.CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "vendor_fix", "details": "BD has implemented third-party vendor patches through BD\u0027s routine patch deployment process that resolves these vulnerabilities for most devices. Some devices require coordination with BD. BD is in the process of contacting users to schedule and deploy patches. There is currently no reported verified instance of the KRACK vulnerability being exploited maliciously against BD devices.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, { "category": "vendor_fix", "details": "Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, { "category": "vendor_fix", "details": "BD has published a product security bulletin to notify users about this issue and to provide additional mitigation counsel. It can be found at the following location on their web page:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] }, { "category": "vendor_fix", "details": "http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-wpa2-krack-wi-fi-vulnerability", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ], "url": "http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-wpa2-krack-wi-fi-vulnerability" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012" ] } ] } ] }
ICSA-17-353-02
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet", "summary": "discovering these vulnerabilities" }, { "names": [ "KU Leuven" ], "summary": "discovering these vulnerabilities" }, { "organization": "PEPPERL+FUCHS", "summary": "reporting to CERT@VDE that their products are affected" }, { "organization": "CERT@VDE", "summary": "coordinating these vulnerabilities with ICS-CERT" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "ATTENTION: Low skill level is needed to exploit. Public exploits are available.", "title": "Risk evaluation" }, { "category": "other", "text": "Communications, Critical Manufacturing, Information Technology", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-353-02 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-353-02.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-353-02 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-353-02" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-353-02" } ], "title": "PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol", "tracking": { "current_release_date": "2017-12-19T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-17-353-02", "initial_release_date": "2017-12-19T00:00:00.000000Z", "revision_history": [ { "date": "2017-12-19T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-353-02 PEPPERL+FUCHS, ecom instruments WLAN capable devices using the WPA2 Protocol" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CK71A-ATEX: All versions", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "CK71A-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Smart-Ex 201: All versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Smart-Ex 201" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Ex-Handy 09: All versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "Ex-Handy 09" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CN70E-ATEX: All versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "CN70E-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CN70A-ATEX: All versions", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "CN70A-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CK70A-ATEX: All versions", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "CK70A-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "i.roc Ci70-Ex: All versions", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "i.roc Ci70-Ex" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Tab-Ex 01: All versions", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "Tab-Ex 01" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Smart-Ex 01: All versions", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "Smart-Ex 01" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Pad-Ex 01: All versions", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "Pad-Ex 01" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Ex-Handy 209: All versions", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "Ex-Handy 209" } ], "category": "vendor", "name": "PEPPERL+FUCHS" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "Multiple products are affected by key reinstallation attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames.The following CVEs have been assigned to this group of vulnerabilities:", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "vendor_fix", "details": "Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] }, { "category": "mitigation", "details": "Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] }, { "category": "mitigation", "details": "For more information CERT@VDE has released a security advisory found at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ], "url": "https://cert.vde.com/de-de/advisories/vde-2017-005" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] } ] } ] }
icsa-17-353-02
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet", "summary": "discovering these vulnerabilities" }, { "names": [ "KU Leuven" ], "summary": "discovering these vulnerabilities" }, { "organization": "PEPPERL+FUCHS", "summary": "reporting to CERT@VDE that their products are affected" }, { "organization": "CERT@VDE", "summary": "coordinating these vulnerabilities with ICS-CERT" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "ATTENTION: Low skill level is needed to exploit. Public exploits are available.", "title": "Risk evaluation" }, { "category": "other", "text": "Communications, Critical Manufacturing, Information Technology", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-353-02 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-353-02.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-353-02 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-353-02" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-353-02" } ], "title": "PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol", "tracking": { "current_release_date": "2017-12-19T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-17-353-02", "initial_release_date": "2017-12-19T00:00:00.000000Z", "revision_history": [ { "date": "2017-12-19T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-353-02 PEPPERL+FUCHS, ecom instruments WLAN capable devices using the WPA2 Protocol" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CK71A-ATEX: All versions", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "CK71A-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Smart-Ex 201: All versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Smart-Ex 201" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Ex-Handy 09: All versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "Ex-Handy 09" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CN70E-ATEX: All versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "CN70E-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CN70A-ATEX: All versions", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "CN70A-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "CK70A-ATEX: All versions", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "CK70A-ATEX" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "i.roc Ci70-Ex: All versions", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "i.roc Ci70-Ex" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Tab-Ex 01: All versions", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "Tab-Ex 01" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Smart-Ex 01: All versions", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "Smart-Ex 01" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Pad-Ex 01: All versions", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "Pad-Ex 01" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "Ex-Handy 209: All versions", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "Ex-Handy 209" } ], "category": "vendor", "name": "PEPPERL+FUCHS" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "Multiple products are affected by key reinstallation attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames.The following CVEs have been assigned to this group of vulnerabilities:", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "vendor_fix", "details": "Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] }, { "category": "mitigation", "details": "Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] }, { "category": "mitigation", "details": "For more information CERT@VDE has released a security advisory found at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ], "url": "https://cert.vde.com/de-de/advisories/vde-2017-005" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011" ] } ] } ] }
icsma-19-029-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet", "summary": "discovering the KRACK vulnerabilities" }, { "organization": "KU Leuven", "summary": "discovering the KRACK vulnerabilities" }, { "names": [ "Stryker" ], "summary": "reporting to NCCIC that the KRACK vulnerabilities may possibly affect these products" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.", "title": "Risk evaluation" }, { "category": "other", "text": "Healthcare and Public Health", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "United States", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "This vulnerability is exploitable from an adjacent network. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSMA-19-029-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsma-19-029-01.json" }, { "category": "self", "summary": "ICS Advisory ICSMA-19-029-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-029-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Stryker Medical Beds", "tracking": { "current_release_date": "2019-01-29T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSMA-19-029-01", "initial_release_date": "2019-01-29T00:00:00.000000Z", "revision_history": [ { "date": "2019-01-29T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSMA-19-029-01 Stryker Medical Beds" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "3002 S3 | 3005 S3", "product": { "name": "S3 MedSurg Bed (enabled with iBed Wireless): Models 3002 S3 and 3005 S3", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "S3 MedSurg Bed (enabled with iBed Wireless)" }, { "branches": [ { "category": "product_version", "name": "3002", "product": { "name": "Secure II MedSurg Bed (enabled with iBed Wireless): Model 3002", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Secure II MedSurg Bed (enabled with iBed Wireless)" }, { "branches": [ { "category": "product_version", "name": "2131 and 2141", "product": { "name": "InTouch ICU Bed (enabled with Bed Wireless): Models 2131 and 2141", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "InTouch ICU Bed (enabled with Bed Wireless)" } ], "category": "vendor", "name": "Stryker" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "An industry-wide vulnerability exists in the WPA and WPA2 protocol affected by the Key Reinstallation Attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse, resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames. The following CVEs have been assigned to this group of vulnerabilities: CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.. CVE-2017-13078: Reinstallation of the group key during the four-way handshake. CVE-2017-13078: Reinstallation of the group key during the four-way handshake.. CVE-2017-13079: Reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake.CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "vendor_fix", "details": "Stryker has released software updates for affected products to mitigate the KRACK vulnerabilities.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "Stryker recommends users take additional defensive measures to minimize the risk of exploitation. Specifically, users should:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "For additional questions, users can call 1-800-STRYKER, option 2 for Stryker Medical Technical Support.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ] } ] }
icsa-17-318-02a
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "the Katholieke Universiteit Leuven in Belgium", "summary": "discovering this vulnerability" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Vendor: ABB", "title": "Risk evaluation" }, { "category": "other", "text": "Critical Manufacturing, Energy", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Switzerland", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ICS-CERT for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from adjacent networks. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-318-02A JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-02a.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-318-02A Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-02a" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-02a" } ], "title": "ABB TropOS (Update A)", "tracking": { "current_release_date": "2018-02-15T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-17-318-02A", "initial_release_date": "2017-11-14T00:00:00.000000Z", "revision_history": [ { "date": "2017-11-14T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-318-02 ABB TropOS" }, { "date": "2018-02-15T00:00:00.000000Z", "legacy_version": "A", "number": "2", "summary": "ICSA-17-318-02A ABB TropOS (Update A)" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c= 8.5.2", "product": { "name": "TropOS Mesh OS: release 8.5.2 or prior", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "TropOS Mesh OS" } ], "category": "vendor", "name": "ABB" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-326", "name": "Inadequate Encryption Strength" }, "notes": [ { "category": "summary", "text": "An industry-wide vulnerability exists in the WPA2 key management algorithm devices that use IEEE 802.11w, including the TropOS broadband mesh routers listed above. The vulnerability may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network.The following CVEs have been assigned to this group of vulnerabilities:", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" } ], "remediations": [ { "category": "mitigation", "details": "ABB has released Mesh OS version 8.5.3 to address these vulnerabilities.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "ABB has released an advisory (1KHW02890) on their alerts and notification page:", "product_ids": [ "CSAFPID-0001" ], "url": "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW02890\u0026Action=Launch" }, { "category": "mitigation", "details": "ABB is working on remedial actions for all affected products.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "ABB has released an advisory (1KHW02890) on their alerts and notification page:", "product_ids": [ "CSAFPID-0001" ], "url": "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW02890\u0026Action=Launch" }, { "category": "mitigation", "details": "This advisory will be updated when firmware, including remedial measures, is available.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "The TropOS mesh wireless interfaces are not vulnerable. Wired client interfaces (Ethernet, Serial) are not vulnerable. An attacker must be in physical proximity of the Wi-Fi access point and connected client to be successful. If the communication across the Wi-Fi link is encrypted at Layer 3 (e.g., SSH, SSL, HTTPS, or SNMPv3 encrypted), privacy is maintained during an otherwise successful attack. If possible, encrypt communication across the Wi-Fi link at Layer 3 using SSH, SSL, HTTPS, or SNMPv3. There is no complete workaround which allows protected Wi-Fi access to the TropOS Mesh.", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "ABB users with a current Complete Software Care or Complete Software + Hardware Care subscription are advised to contact ABB Wireless support on phone +1(408) 331 6800, ext. 4, or email tropos.support@nam.abb.com.", "product_ids": [ "CSAFPID-0001" ], "url": "mailto:tropos.support@nam.abb.com" } ] } ] }
ICSA-17-325-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet", "summary": "discovering these vulnerabilities" }, { "names": [ "KU Leuven" ], "summary": "discovering these vulnerabilities" }, { "organization": "PHOENIX CONTACT", "summary": "reporting these vulnerabilities to CERT@VDE" }, { "organization": "CERT@VDE", "summary": "coordinating these vulnerabilities with ICS-CERT" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "ATTENTION: Public exploits are available.", "title": "Risk evaluation" }, { "category": "other", "text": "Communications, Critical Manufacturing, Information Technology", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ICS-CERT for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "These vulnerabilities are not remotely exploitable. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-325-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-325-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-325-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-325-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-325-01" } ], "title": "PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol", "tracking": { "current_release_date": "2017-11-21T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-17-325-01", "initial_release_date": "2017-11-21T00:00:00.000000Z", "revision_history": [ { "date": "2017-11-21T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-325-01 PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN SPA: all versions", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "FL WLAN SPA" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL COMSERVER WLAN 232/422/485: all versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "FL COMSERVER WLAN 232/422/485" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "TPC 6013: all versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "TPC 6013" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "VMT 30xx: all versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "VMT 30xx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 24 EC 802-11: all versions", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "FL WLAN 24 EC 802-11" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "BL2 BPC: all versions", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "BL2 BPC" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 110x: all versions", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "FL WLAN 110x" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 24 DAP 802-11: all versions", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "FL WLAN 24 DAP 802-11" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN EPA: all versions", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "FL WLAN EPA" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "BL2 PPC: all versions", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "BL2 PPC" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "ITC 8113: all versions", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "ITC 8113" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "VMT 50xx: all versions", "product_id": "CSAFPID-00012" } } ], "category": "product_name", "name": "VMT 50xx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "RAD-80211-XD: all versions", "product_id": "CSAFPID-00013" } } ], "category": "product_name", "name": "RAD-80211-XD" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 210x: all versions", "product_id": "CSAFPID-00014" } } ], "category": "product_name", "name": "FL WLAN 210x" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 24 AP 802-11: all versions", "product_id": "CSAFPID-00015" } } ], "category": "product_name", "name": "FL WLAN 24 AP 802-11" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "RAD-WHG/WLAN-XD: all versions", "product_id": "CSAFPID-00016" } } ], "category": "product_name", "name": "RAD-WHG/WLAN-XD" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "VMT 70xx: all versions", "product_id": "CSAFPID-00017" } } ], "category": "product_name", "name": "VMT 70xx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 510x: all versions", "product_id": "CSAFPID-00018" } } ], "category": "product_name", "name": "FL WLAN 510x" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 230 AP 802-11: all versions", "product_id": "CSAFPID-00019" } } ], "category": "product_name", "name": "FL WLAN 230 AP 802-11" } ], "category": "vendor", "name": "PHOENIX CONTACT, Innominate Security Technologies" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "Multiple products are affected by key reinstallation attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames.The following CVEs have been assigned to this group of vulnerabilities:", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NH" } ], "remediations": [ { "category": "mitigation", "details": "PHOENIX CONTACT has reported that users operating embedded devices in AP mode are not affected by these vulnerabilities. PHOENIX CONTACT is actively working on discovering how these vulnerabilities affect its products and plans to release future updates as they become available. For more information, please see the advisory at this location:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ], "url": "https://cert.vde.com/de-de/advisories/vde-2017-003" }, { "category": "mitigation", "details": "PHOENIX CONTACT recommends that users apply the security update provided by Microsoft at the following location for devices running Microsoft Windows:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ], "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-13080" }, { "category": "mitigation", "details": "If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ] } ] } ] }
icsa-17-325-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "imec-DistriNet", "summary": "discovering these vulnerabilities" }, { "names": [ "KU Leuven" ], "summary": "discovering these vulnerabilities" }, { "organization": "PHOENIX CONTACT", "summary": "reporting these vulnerabilities to CERT@VDE" }, { "organization": "CERT@VDE", "summary": "coordinating these vulnerabilities with ICS-CERT" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "ATTENTION: Public exploits are available.", "title": "Risk evaluation" }, { "category": "other", "text": "Communications, Critical Manufacturing, Information Technology", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ICS-CERT for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "These vulnerabilities are not remotely exploitable. High skill level is needed to exploit.", "title": "Recommended Practices" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-325-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-325-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-325-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-325-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-325-01" } ], "title": "PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol", "tracking": { "current_release_date": "2017-11-21T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-17-325-01", "initial_release_date": "2017-11-21T00:00:00.000000Z", "revision_history": [ { "date": "2017-11-21T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-325-01 PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN SPA: all versions", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "FL WLAN SPA" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL COMSERVER WLAN 232/422/485: all versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "FL COMSERVER WLAN 232/422/485" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "TPC 6013: all versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "TPC 6013" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "VMT 30xx: all versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "VMT 30xx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 24 EC 802-11: all versions", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "FL WLAN 24 EC 802-11" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "BL2 BPC: all versions", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "BL2 BPC" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 110x: all versions", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "FL WLAN 110x" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 24 DAP 802-11: all versions", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "FL WLAN 24 DAP 802-11" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN EPA: all versions", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "FL WLAN EPA" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "BL2 PPC: all versions", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "BL2 PPC" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "ITC 8113: all versions", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "ITC 8113" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "VMT 50xx: all versions", "product_id": "CSAFPID-00012" } } ], "category": "product_name", "name": "VMT 50xx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "RAD-80211-XD: all versions", "product_id": "CSAFPID-00013" } } ], "category": "product_name", "name": "RAD-80211-XD" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 210x: all versions", "product_id": "CSAFPID-00014" } } ], "category": "product_name", "name": "FL WLAN 210x" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 24 AP 802-11: all versions", "product_id": "CSAFPID-00015" } } ], "category": "product_name", "name": "FL WLAN 24 AP 802-11" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "RAD-WHG/WLAN-XD: all versions", "product_id": "CSAFPID-00016" } } ], "category": "product_name", "name": "RAD-WHG/WLAN-XD" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "VMT 70xx: all versions", "product_id": "CSAFPID-00017" } } ], "category": "product_name", "name": "VMT 70xx" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 510x: all versions", "product_id": "CSAFPID-00018" } } ], "category": "product_name", "name": "FL WLAN 510x" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "FL WLAN 230 AP 802-11: all versions", "product_id": "CSAFPID-00019" } } ], "category": "product_name", "name": "FL WLAN 230 AP 802-11" } ], "category": "vendor", "name": "PHOENIX CONTACT, Innominate Security Technologies" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "summary", "text": "Multiple products are affected by key reinstallation attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames.The following CVEs have been assigned to this group of vulnerabilities:", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NH" } ], "remediations": [ { "category": "mitigation", "details": "PHOENIX CONTACT has reported that users operating embedded devices in AP mode are not affected by these vulnerabilities. PHOENIX CONTACT is actively working on discovering how these vulnerabilities affect its products and plans to release future updates as they become available. For more information, please see the advisory at this location:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ], "url": "https://cert.vde.com/de-de/advisories/vde-2017-003" }, { "category": "mitigation", "details": "PHOENIX CONTACT recommends that users apply the security update provided by Microsoft at the following location for devices running Microsoft Windows:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ], "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-13080" }, { "category": "mitigation", "details": "If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013", "CSAFPID-00014", "CSAFPID-00015", "CSAFPID-00016", "CSAFPID-00017", "CSAFPID-00018", "CSAFPID-00019" ] } ] } ] }
icsa-17-318-01
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "names": [ "Mathy Vanhoef" ], "organization": "the Katholieke Universiteit Leuven in Belgium", "summary": "discovering these vulnerabilities" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "summary", "text": "Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.", "title": "Summary" }, { "category": "other", "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "CISAservicedesk@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-17-318-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-17-318-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-01" } ], "title": "ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)", "tracking": { "current_release_date": "2019-04-09T00:00:00.000000Z", "generator": { "engine": { "name": "CISA USCert CSAF Generator", "version": "1" } }, "id": "ICSA-17-318-01", "initial_release_date": "2017-11-14T00:00:00.000000Z", "revision_history": [ { "date": "2017-11-14T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products" }, { "date": "2017-12-05T00:00:00.000000Z", "legacy_version": "A", "number": "2", "summary": "ICSA-17-318-01A Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update A)" }, { "date": "2017-12-19T00:00:00.000000Z", "legacy_version": "B", "number": "3", "summary": "ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update B)" }, { "date": "2018-01-25T00:00:00.000000Z", "legacy_version": "C", "number": "4", "summary": "ICSA-17-318-01C Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)" }, { "date": "2018-04-24T00:00:00.000000Z", "legacy_version": "D", "number": "5", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update D)" }, { "date": "2018-11-13T00:00:00.000000Z", "legacy_version": "E", "number": "6", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update E)" }, { "date": "2019-04-09T00:00:00.000000Z", "legacy_version": "F", "number": "7", "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)" } ], "status": "final", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c 22.3.5.16", "product": { "name": "SIMATIC RF650M: All versions with Summit Client Utility prior to v22.3.5.16", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "SIMATIC RF650M" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SCALANCE W-700 (IEEE 802.11a/b/g): All versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "SCALANCE W-700 (IEEE 802.11a/b/g)" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SIMATIC Mobile Panel 277(F) IWLAN: All versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "SIMATIC Mobile Panel 277(F) IWLAN" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "RUGGEDCOM RS9xxW: All versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "RUGGEDCOM RS9xxW" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 22.3.5.16", "product": { "name": "SIMATIC RF350M: All versions with Summit Client Utility prior to v22.3.5.16", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "SIMATIC RF350M" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 01.03.01", "product": { "name": "SINAMICS v20 Smart Access Module: All versions prior to v01.03.01", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "SINAMICS v20 Smart Access Module" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 9.21.19.003", "product": { "name": "SCALANCE WLC712: All versions prior to v9.21.19.003", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "SCALANCE WLC712" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 6.2.1", "product": { "name": "SCALANCE W-700 (IEEE 802.11n): All versions prior to v6.2.1", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "SCALANCE W-700 (IEEE 802.11n)" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 6.5.1.5-4.3.1.8", "product": { "name": "SCALANCE W1750D: All versions prior to v6.5.1.5-4.3.1.8", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "SCALANCE W1750D" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 2.11.2", "product": { "name": "RUGGEDCOM RX1400 with WLAN interface: All versions prior to v2.11.2", "product_id": "CSAFPID-00010" } } ], "category": "product_name", "name": "RUGGEDCOM RX1400 with WLAN interface" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SIMATIC IWLAN-PB/LINK: All versions", "product_id": "CSAFPID-00011" } } ], "category": "product_name", "name": "SIMATIC IWLAN-PB/LINK" }, { "branches": [ { "category": "product_version_range", "name": "\u003c 9.21.19.003", "product": { "name": "SCALANCE WLC711: All versions prior to v9.21.19.003", "product_id": "CSAFPID-00012" } } ], "category": "product_name", "name": "SCALANCE WLC711" }, { "branches": [ { "category": "product_version", "name": "vers:all/*", "product": { "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN: All versions", "product_id": "CSAFPID-00013" } } ], "category": "product_name", "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13077", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the pairwise key in the four-way handshake.CVE-2017-13077 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13077" }, { "cve": "CVE-2017-13078", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13078 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13078" }, { "cve": "CVE-2017-13079", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13079 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13079" }, { "cve": "CVE-2017-13080", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13080 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13080" }, { "cve": "CVE-2017-13081", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13081 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13081" }, { "cve": "CVE-2017-13082", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the pairwise transient key (PTK) temporal key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13082 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13082" }, { "cve": "CVE-2017-13084", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the station-to-station-link (STSL) transient key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13084 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13084" }, { "cve": "CVE-2017-13086", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the tunneled direct-link setup (TDLS) peer key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13086 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13086" }, { "cve": "CVE-2017-13087", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the group temporal key (GTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13087 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13087" }, { "cve": "CVE-2017-13088", "cwe": { "id": "CWE-322", "name": "Key Exchange without Entity Authentication" }, "notes": [ { "category": "summary", "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the integrity group temporal key (IGTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13088 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "references": [ { "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Contact the RUGGEDCOM support team at:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-00010", "CSAFPID-00011", "CSAFPID-00012", "CSAFPID-00013" ] } ], "title": "CVE-2017-13088" } ] }
rhsa-2017_2911
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13087)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2911", "url": "https://access.redhat.com/errata/RHSA-2017:2911" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2911.json" } ], "title": "Red Hat Security Advisory: wpa_supplicant security update", "tracking": { "current_release_date": "2024-11-22T11:34:51+00:00", "generator": { "date": "2024-11-22T11:34:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2911", "initial_release_date": "2017-10-18T16:12:37+00:00", "revision_history": [ { "date": "2017-10-18T16:12:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-10-18T16:12:37+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:34:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491692" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13077" }, { "category": "external", "summary": "RHBZ#1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13078", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491693" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13078" }, { "category": "external", "summary": "RHBZ#1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13080", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491696" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13080" }, { "category": "external", "summary": "RHBZ#1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13087", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500303" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13087" }, { "category": "external", "summary": "RHBZ#1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" } ] }
RHSA-2017:2907
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2907", "url": "https://access.redhat.com/errata/RHSA-2017:2907" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "1491698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698" }, { "category": "external", "summary": "1500302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302" }, { "category": "external", "summary": "1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "1500304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2907.json" } ], "title": "Red Hat Security Advisory: wpa_supplicant security update", "tracking": { "current_release_date": "2024-11-22T11:34:46+00:00", "generator": { "date": "2024-11-22T11:34:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2907", "initial_release_date": "2017-10-17T21:38:59+00:00", "revision_history": [ { "date": "2017-10-17T21:38:59+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-10-17T21:38:59+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:34:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Workstation-7.4.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491692" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13077" }, { "category": "external", "summary": "RHBZ#1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13078", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491693" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13078" }, { "category": "external", "summary": "RHBZ#1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13080", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491696" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13080" }, { "category": "external", "summary": "RHBZ#1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13082", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491698" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) by retransmitting Fast BSS Transition (FT) Reassociation Requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13082" }, { "category": "external", "summary": "RHBZ#1491698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13082", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13086", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500302" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used Tunneled Direct-Link Setup (TDLS) Peerkey (TPK) key during a TDLS handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6, as it does not support TDLS.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13086" }, { "category": "external", "summary": "RHBZ#1500302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13086", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13087", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500303" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13087" }, { "category": "external", "summary": "RHBZ#1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13088", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500304" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used integrity group key (IGTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13088" }, { "category": "external", "summary": "RHBZ#1500304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13088", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" } ] }
rhsa-2017:2911
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13087)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2911", "url": "https://access.redhat.com/errata/RHSA-2017:2911" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2911.json" } ], "title": "Red Hat Security Advisory: wpa_supplicant security update", "tracking": { "current_release_date": "2024-11-22T11:34:51+00:00", "generator": { "date": "2024-11-22T11:34:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2911", "initial_release_date": "2017-10-18T16:12:37+00:00", "revision_history": [ { "date": "2017-10-18T16:12:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-10-18T16:12:37+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:34:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491692" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13077" }, { "category": "external", "summary": "RHBZ#1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13078", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491693" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13078" }, { "category": "external", "summary": "RHBZ#1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13080", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491696" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13080" }, { "category": "external", "summary": "RHBZ#1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13087", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500303" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13087" }, { "category": "external", "summary": "RHBZ#1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" } ] }
rhsa-2017:2907
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2907", "url": "https://access.redhat.com/errata/RHSA-2017:2907" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "1491698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698" }, { "category": "external", "summary": "1500302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302" }, { "category": "external", "summary": "1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "1500304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2907.json" } ], "title": "Red Hat Security Advisory: wpa_supplicant security update", "tracking": { "current_release_date": "2024-11-22T11:34:46+00:00", "generator": { "date": "2024-11-22T11:34:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2907", "initial_release_date": "2017-10-17T21:38:59+00:00", "revision_history": [ { "date": "2017-10-17T21:38:59+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-10-17T21:38:59+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:34:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Workstation-7.4.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491692" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13077" }, { "category": "external", "summary": "RHBZ#1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13078", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491693" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13078" }, { "category": "external", "summary": "RHBZ#1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13080", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491696" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13080" }, { "category": "external", "summary": "RHBZ#1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13082", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491698" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) by retransmitting Fast BSS Transition (FT) Reassociation Requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13082" }, { "category": "external", "summary": "RHBZ#1491698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13082", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13086", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500302" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used Tunneled Direct-Link Setup (TDLS) Peerkey (TPK) key during a TDLS handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6, as it does not support TDLS.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13086" }, { "category": "external", "summary": "RHBZ#1500302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13086", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13087", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500303" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13087" }, { "category": "external", "summary": "RHBZ#1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13088", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500304" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used integrity group key (IGTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13088" }, { "category": "external", "summary": "RHBZ#1500304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13088", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" } ] }
RHSA-2017:2911
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13087)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2911", "url": "https://access.redhat.com/errata/RHSA-2017:2911" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2911.json" } ], "title": "Red Hat Security Advisory: wpa_supplicant security update", "tracking": { "current_release_date": "2024-11-22T11:34:51+00:00", "generator": { "date": "2024-11-22T11:34:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2911", "initial_release_date": "2017-10-18T16:12:37+00:00", "revision_history": [ { "date": "2017-10-18T16:12:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-10-18T16:12:37+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:34:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product_id": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-9.el6_9.2?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product_id": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-9.el6_9.2?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.src", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491692" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13077" }, { "category": "external", "summary": "RHBZ#1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13078", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491693" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13078" }, { "category": "external", "summary": "RHBZ#1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13080", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491696" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13080" }, { "category": "external", "summary": "RHBZ#1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13087", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500303" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13087" }, { "category": "external", "summary": "RHBZ#1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-18T16:12:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2911" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Client-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Client-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6ComputeNode-optional-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6ComputeNode-optional-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Server-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Server-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.src", "6Workstation-6.9.z:wpa_supplicant-1:0.7.3-9.el6_9.2.x86_64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x", "6Workstation-6.9.z:wpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" } ] }
rhsa-2017_2907
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2907", "url": "https://access.redhat.com/errata/RHSA-2017:2907" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "1491698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698" }, { "category": "external", "summary": "1500302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302" }, { "category": "external", "summary": "1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "1500304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2907.json" } ], "title": "Red Hat Security Advisory: wpa_supplicant security update", "tracking": { "current_release_date": "2024-11-22T11:34:46+00:00", "generator": { "date": "2024-11-22T11:34:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2907", "initial_release_date": "2017-10-17T21:38:59+00:00", "revision_history": [ { "date": "2017-10-17T21:38:59+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-10-17T21:38:59+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:34:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Client-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7ComputeNode-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Server-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "relates_to_product_reference": "7Workstation-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" }, "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "relates_to_product_reference": "7Workstation-7.4.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13077", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491692" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13077" }, { "category": "external", "summary": "RHBZ#1491692", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13078", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491693" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13078" }, { "category": "external", "summary": "RHBZ#1491693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13080", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491696" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13080" }, { "category": "external", "summary": "RHBZ#1491696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13082", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1491698" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) by retransmitting Fast BSS Transition (FT) Reassociation Requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13082" }, { "category": "external", "summary": "RHBZ#1491698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13082", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13086", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500302" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used Tunneled Direct-Link Setup (TDLS) Peerkey (TPK) key during a TDLS handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6, as it does not support TDLS.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13086" }, { "category": "external", "summary": "RHBZ#1500302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13086", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13087", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500303" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13087" }, { "category": "external", "summary": "RHBZ#1500303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" }, { "acknowledgments": [ { "names": [ "CERT" ] }, { "names": [ "Mathy Vanhoef" ], "organization": "University of Leuven", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2017-13088", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "discovery_date": "2017-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1500304" } ], "notes": [ { "category": "description", "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used integrity group key (IGTK) during a Wireless Network Management (WNM) Sleep Mode handshake.", "title": "Vulnerability description" }, { "category": "summary", "text": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13088" }, { "category": "external", "summary": "RHBZ#1500304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13088", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088" }, { "category": "external", "summary": "https://access.redhat.com/security/vulnerabilities/kracks", "url": "https://access.redhat.com/security/vulnerabilities/kracks" }, { "category": "external", "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt", "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt" }, { "category": "external", "summary": "https://www.krackattacks.com/", "url": "https://www.krackattacks.com/" } ], "release_date": "2017-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-17T21:38:59+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2907" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src", "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x", "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame" } ] }
var-201710-0206
Vulnerability from variot
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames. An attacker within range of an affected AP and client may leverage these vulnerabilities to conduct attacks that are dependent on the data confidentiality protocols being used. Attacks may include arbitrary packet decryption and injection, TCP connection hijacking, HTTP content injection, or the replay of unicast and group-addressed frames. These vulnerabilities are referred to as Key Reinstallation Attacks or "KRACK" attacks. WPA (Wi-Fi Protected Access) is a system that protects wireless computer networks (Wi-Fi). The WPA2 wireless network has a PTK-TK key reload vulnerability in the fourth handshake. WPA2 is prone to multiple security weaknesses. Exploiting these issues may allow an unauthorized user to intercept and manipulate data or disclose sensitive information. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Important: wpa_supplicant security update Advisory ID: RHSA-2017:2907-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2017:2907 Issue date: 2017-10-17 CVE Names: CVE-2017-13077 CVE-2017-13078 CVE-2017-13080 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 =====================================================================
- Summary:
An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Relevant releases/architectures:
Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64
- Description:
The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)
Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues. Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
1491692 - CVE-2017-13077 wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake 1491693 - CVE-2017-13078 wpa_supplicant: Reinstallation of the group key in the 4-way handshake 1491696 - CVE-2017-13080 wpa_supplicant: Reinstallation of the group key in the group key handshake 1491698 - CVE-2017-13082 wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it 1500302 - CVE-2017-13086 wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake 1500303 - CVE-2017-13087 wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame 1500304 - CVE-2017-13088 wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame
- Package List:
Red Hat Enterprise Linux Client (v. 7):
Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm
x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm
Red Hat Enterprise Linux ComputeNode (v. 7):
Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm
x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm
aarch64: wpa_supplicant-2.6-5.el7_4.1.aarch64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.aarch64.rpm
ppc64: wpa_supplicant-2.6-5.el7_4.1.ppc64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.ppc64.rpm
ppc64le: wpa_supplicant-2.6-5.el7_4.1.ppc64le.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.ppc64le.rpm
s390x: wpa_supplicant-2.6-5.el7_4.1.s390x.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.s390x.rpm
x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 7):
Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm
x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2017-13077 https://access.redhat.com/security/cve/CVE-2017-13078 https://access.redhat.com/security/cve/CVE-2017-13080 https://access.redhat.com/security/cve/CVE-2017-13082 https://access.redhat.com/security/cve/CVE-2017-13086 https://access.redhat.com/security/cve/CVE-2017-13087 https://access.redhat.com/security/cve/CVE-2017-13088 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/security/vulnerabilities/kracks
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
APPLE-SA-2017-12-12-2 AirPort Base Station Firmware Update 7.7.9
AirPort Base Station Firmware Update 7.7.9 is now available and addresses the following:
AirPort Base Station Firmware Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac Impact: An attacker within range may be able to execute arbitrary code on the Wi-Fi chip Description: A memory corruption issue was addressed with improved memory handling. CVE-2017-9417: Nitay Artenstein of Exodus Intelligence
AirPort Base Station Firmware Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac Impact: An attacker in Wi-Fi range may force nonce reuse in WPA unicast/PTK clients (Key Reinstallation Attacks - KRACK) Description: A logic issue existed in the handling of state transitions. This was addressed with improved state management. CVE-2017-13077: Mathy Vanhoef of the imec-DistriNet group at KU Leuven CVE-2017-13078: Mathy Vanhoef of the imec-DistriNet group at KU Leuven
AirPort Base Station Firmware Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac Impact: An attacker in Wi-Fi range may force nonce reuse in WPA multicast/GTK clients (Key Reinstallation Attacks - KRACK) Description: A logic issue existed in the handling of state transitions. This was addressed with improved state management. CVE-2017-13080: Mathy Vanhoef of the imec-DistriNet group at KU Leuven
Installation note:
Firmware version 7.7.9 is installed on AirPort Extreme or AirPort Time Capsule base stations with 802.11ac using AirPort Utility for Mac or iOS.
AirPort Utility for Mac is a free download from https://support.apple.com/downloads/ and AirPort Utility for iOS is a free download from the App Store. CVE-2017-13080: Mathy Vanhoef of the imec-DistriNet group at KU Leuven
Installation note:
Wi-Fi Update for Boot Camp 6.4.0 may be obtained from Apple Software Update for Windows. Those vulnerabilities applies to both the access point (implemented in hostapd) and the station (implemented in wpa_supplicant).
An attacker exploiting the vulnerabilities could force the vulnerable system to reuse cryptographic session keys, enabling a range of cryptographic attacks against the ciphers used in WPA1 and WPA2.
For the stable distribution (stretch), these problems have been fixed in version 2:2.4-1+deb9u1.
For the testing distribution (buster), these problems have been fixed in version 2:2.4-1.1.
For the unstable distribution (sid), these problems have been fixed in version 2:2.4-1.1.
We recommend that you upgrade your wpa packages. ========================================================================== Ubuntu Security Notice USN-3455-1 October 16, 2017
wpa vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.04
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in wpa_supplicant.
Software Description: - wpa: client support for WPA and WPA2
Details:
Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly handled WPA2. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)
Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase parameters. A remote attacker could use this issue to cause a denial of service. (CVE-2016-4476)
Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase parameters. A local attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2016-4477)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.04: hostapd 2.4-0ubuntu9.1 wpasupplicant 2.4-0ubuntu9.1
Ubuntu 16.04 LTS: hostapd 2.4-0ubuntu6.2 wpasupplicant 2.4-0ubuntu6.2
Ubuntu 14.04 LTS: hostapd 2.1-0ubuntu1.5 wpasupplicant 2.1-0ubuntu1.5
After a standard system update you need to reboot your computer to make all the necessary changes. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201711-03
https://security.gentoo.org/
Severity: Normal Title: hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks Date: November 10, 2017 Bugs: #634436, #634438 ID: 201711-03
Synopsis
A flaw was discovered in the 4-way handshake in hostapd and wpa_supplicant that allows attackers to conduct a Man in the Middle attack.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-wireless/hostapd < 2.6-r1 >= 2.6-r1 2 net-wireless/wpa_supplicant < 2.6-r3 >= 2.6-r3 ------------------------------------------------------------------- 2 affected packages
Description
WiFi Protected Access (WPA and WPA2) and it's associated technologies are all vulnerable to the KRACK attacks. Please review the referenced CVE identifiers for details.
Impact
An attacker can carry out the KRACK attacks on a wireless network in order to gain access to network clients. Once achieved, the attacker can potentially harvest confidential information (e.g. HTTP/HTTPS), inject malware, or perform a myriad of other attacks.
Workaround
There is no known workaround at this time.
Resolution
All hostapd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/hostapd-2.6-r1"
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot -v ">=net-wireless/wpa_supplicant-2.6-r3"
References
[ 1 ] CVE-2017-13077 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-13077 [ 2 ] CVE-2017-13078 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-13078 [ 3 ] CVE-2017-13079 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-13079 [ 4 ] CVE-2017-13080 . 6) - i386, x86_64
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
============================================================================= FreeBSD-SA-17:07.wpa Security Advisory The FreeBSD Project
Topic: WPA2 protocol vulnerability
Category: contrib Module: wpa Announced: 2017-10-16 Credits: Mathy Vanhoef Affects: All supported versions of FreeBSD. Corrected: 2017-10-17 17:30:18 UTC (stable/11, 11.1-STABLE) 2017-10-17 17:57:18 UTC (releng/11.1, 11.1-RELEASE-p2) 2017-10-17 17:56:03 UTC (releng/11.0, 11.0-RELEASE-p13) 2017-10-19 03:18:22 UTC (stable/10, 10.4-STABLE) 2017-10-19 03:20:17 UTC (releng/10.4, 10.4-RELEASE-p1) 2017-10-19 03:19:42 UTC (releng/10.3, 10.3-RELEASE-p22) CVE Name: CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088
For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .
- Revision history
v1.0 2017-10-17 Initial release. v1.1 2017-10-19 Add patches for 10.x releases.
I.
hostapd and wpa_supplicant are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.
II. Problem Description
A vulnerability was found in how a number of implementations can be triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by replaying a specific frame that is used to manage the keys.
III. Impact
Such reinstallation of the encryption key can result in two different types of vulnerabilities: disabling replay protection and significantly reducing the security of encryption to the point of allowing frames to be decrypted or some parts of the keys to be determined by an attacker depending on which cipher is used.
IV. Workaround
An updated version of wpa_supplicant is available in the FreeBSD Ports Collection. Install version 2.6_2 or later of the security/wpa_supplicant port/pkg. Once installed, update /etc/rc.conf to use the new binary:
wpa_supplicant_program="/usr/local/sbin/wpa_supplicant"
and restart networking.
An updated version of hostapd is available in the FreeBSD Ports Collection. Install version 2.6_1 or later of the net/hostapd port/pkg. Once installed, update /etc/rc.conf to use the new binary:
hostapd_program="/usr/local/sbin/hostapd"
and restart hostapd.
V. Solution
Perform one of the following:
1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.
Restart the Wi-Fi network interfaces/hostapd or reboot the system.
2) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:
freebsd-update fetch
freebsd-update install
Restart the Wi-Fi network interfaces/hostapd or reboot the system.
3) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.
[FreeBSD 11.0-RELEASE, 11.1-RELEASE, and 11-STABLE]
fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch
fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch.asc
gpg --verify wpa-11.patch.asc
[FreeBSD 10.3-RELEASE, 10.4-RELEASE, and 10-STABLE]
fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch
fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch.asc
gpg --verify wpa-10.patch.asc
b) Apply the patch. Execute the following commands as root:
cd /usr/src
patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as described in .
Restart the applicable daemons, or reboot the system.
VI. Correction details
The following list contains the correction revision numbers for each affected branch.
Branch/path Revision
stable/11/ r324697 releng/11.0/ r324698 releng/11.1/ r324699 stable/10/ r324739 releng/10.3/ r324740 releng/10.4/ r324741
To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:
svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
VII. References
The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEHPf/b631yp++G4yy7Wfs1l3PaucFAlnoGpNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDFD RjdGRjZGQURGNUNBOUZCRTFCOENCMkVENjdFQ0Q2NURDRjZBRTcACgkQ7Wfs1l3P auc7WBAAm27w+fujv5sJsRxauUMopTVtRh5utwbDuoHTP+L+RCWmQfVBmueNQ0gf uJzMNxBIkbtY9LvyukpRsH3iD7mh26c0pd9rxxkkr4F96C9B5+W0amxJF1gdm54/ F/50FpY+lo7cNs5tiBjypPrg8UOBBI/1G4XR7130XC0HjaTwt1ngZ0oQUWUMSsIp gN5ZfPul81WPWd1NqF+vyObcJhwq/Y1uoexoO27o7GQCFZoL3enZy8c4f1xqMlVM 4HHkTgNGac6E0aW+ArH4J0DFFAOJXPqF8rdt+9XINfoBbtliIyOixJ4oh1n6eAR0 VpBWZKFNyXSlUKIvDGa+LDhxgL1jJXV0ABSyKlUOijdmr3bbbiQE9MW/MNv2AFTd OAFQ0QQtm9KCWp5JLh+FPIb/kR2l7MOUP+yz4zFcJpdGtl9tDLyPN8vRTq60bY8O y7tBcf/SMqkd/AIFdchL4zrOguKnRARydIlwTarp8wtAQI3MKSsa1B0wgsDtlL6K xfdjnwWMKvKKlNOW16e1WXXO0n/ucHV4njBE+bGPro3jLgXP2/WFZpIGAR3I4xrr SdD4AxSNiR9f3bL7LRfMIbugJAylWNSlTLWUOVUv0/ONh85LqbcCj13NI230B64K ETx2QOZgKnCs2oDNiw4aQHb7kvi2w94Iw/R1sAPkkxYJWO3reyE= =h/5q -----END PGP SIGNATURE----- .
Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/wpa_supplicant-2.6-i586-1_slack14.2.txz: Upgraded. This update includes patches to mitigate the WPA2 protocol issues known as "KRACK" (Key Reinstallation AttaCK), which may be used to decrypt data, hijack TCP connections, and to forge and inject packets. CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it. For more information, see: https://www.krackattacks.com/ https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13084 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088 ( Security fix ) +--------------------------+
Where to find the new packages: +-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you.
Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/wpa_supplicant-2.6-i486-1_slack14.0.txz
Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.0.txz
Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/wpa_supplicant-2.6-i486-1_slack14.1.txz
Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.1.txz
Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/wpa_supplicant-2.6-i586-1_slack14.2.txz
Updated package for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.2.txz
Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/wpa_supplicant-2.6-i586-2.txz
Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/wpa_supplicant-2.6-x86_64-2.txz
MD5 signatures: +-------------+
Slackware 14.0 package: d8ecfaadb50b3547967ab53733ffc019 wpa_supplicant-2.6-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: f25216d28800504ce498705da7c9a825 wpa_supplicant-2.6-x86_64-1_slack14.0.txz
Slackware 14.1 package: 15c61050e4bab2581757befd86be74c0 wpa_supplicant-2.6-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 49fd537a520338744f7757615556d352 wpa_supplicant-2.6-x86_64-1_slack14.1.txz
Slackware 14.2 package: c5539f40c8510af89be92945f0f80185 wpa_supplicant-2.6-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 4c527ff84fcdfd7839f217bbce2e4ae4 wpa_supplicant-2.6-x86_64-1_slack14.2.txz
Slackware -current package: 28bd88a54e96368f7a7020c1f5fb67fe n/wpa_supplicant-2.6-i586-2.txz
Slackware x86_64 -current package: 464fc6b48d1ac077f47e9a3a8534c160 n/wpa_supplicant-2.6-x86_64-2.txz
Installation instructions: +------------------------+
Upgrade the package as root:
upgradepkg wpa_supplicant-2.6-i586-1_slack14.2.txz
+-----+
Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com
+------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201710-0206", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "linux enterprise point of sale", "scope": "eq", "trust": 1.6, "vendor": "suse", "version": "11" }, { "model": "linux enterprise server", "scope": "eq", "trust": 1.6, "vendor": "suse", "version": "11" }, { "model": "openstack cloud", "scope": "eq", "trust": 1.6, "vendor": "suse", "version": "6" }, { "model": "linux enterprise desktop", "scope": "eq", "trust": 1.6, "vendor": "suse", "version": "12" }, { "model": "linux enterprise server", "scope": "eq", "trust": 1.6, "vendor": "suse", "version": "12" }, { "model": "enterprise linux desktop", "scope": "eq", "trust": 1.3, "vendor": "redhat", "version": "7" }, { "model": "enterprise linux server", "scope": "eq", "trust": 1.3, "vendor": "redhat", "version": "7" }, { "model": "freebsd", "scope": "eq", "trust": 1.0, "vendor": "freebsd", "version": "10.4" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.6.9" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.6.10" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.10" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.10" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.6.8" }, { "model": "freebsd", "scope": "eq", "trust": 1.0, "vendor": "freebsd", "version": "11.1" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "1.1" }, { "model": "freebsd", "scope": "eq", "trust": 1.0, "vendor": "freebsd", "version": "10" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.5" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.8" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.6" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "1.0" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.3" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.11" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.10" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.11" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.7" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.9" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.8" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "8.0" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.5" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.9" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.6.9" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.8" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.10" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.1" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.7" }, { "model": "leap", "scope": "eq", "trust": 1.0, "vendor": "opensuse", "version": "42.3" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.9" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.5" }, { "model": "leap", "scope": "eq", "trust": 1.0, "vendor": "opensuse", "version": "42.2" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.6" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "1.0" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.10" }, { "model": "freebsd", "scope": "eq", "trust": 1.0, "vendor": "freebsd", "version": "*" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.8" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.7.3" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.5" }, { "model": "ubuntu linux", "scope": "eq", "trust": 1.0, "vendor": "canonical", "version": "17.04" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.9" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.11" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.8" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.2" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.1" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.7" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.9" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "9.0" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.7.3" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.11" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.4" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.2" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.8" }, { "model": "ubuntu linux", "scope": "eq", "trust": 1.0, "vendor": "canonical", "version": "14.04" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.4" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.7" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.0" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.6" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.4" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.7" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.6" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.6.10" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.10" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.6.8" }, { "model": "ubuntu linux", "scope": "eq", "trust": 1.0, "vendor": "canonical", "version": "16.04" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "1.1" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.8" }, { "model": "freebsd", "scope": "eq", "trust": 1.0, "vendor": "freebsd", "version": "11" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.3" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.3.11" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.7" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.5.11" }, { "model": "hostapd", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.9" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.4.7" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "2.0" }, { "model": "wpa supplicant", "scope": "eq", "trust": 1.0, "vendor": "w1 fi", "version": "0.2.4" }, { "model": null, "scope": null, "trust": 0.8, "vendor": "9front", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "adtran", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "avm", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "actiontec", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "aerohive", "version": null }, { "model": null,