CVE-2017-13079

Published: 16 October 2017

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.

Priority

High

CVSS 3 base score: 5.3

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
• https://www.krackattacks.com/
• https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
• https://ubuntu.com/security/notices/USN-3455-1
• NVD
• Launchpad
• Debian