CVE-2017-13081

Publication date 16 October 2017

Last updated 24 July 2024

Ubuntu priority

High

Why this priority?

Cvss 3 Severity Score

5.3 · Medium

Score breakdown

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.

Read the notes from the security team

Status

Package Ubuntu Release Status
linux-firmware 21.04 hirsute
Fixed 1.170
20.10 groovy
Fixed 1.170
20.04 LTS focal
Fixed 1.170
19.10 eoan
Fixed 1.170
19.04 disco
Fixed 1.170
18.10 cosmic
Fixed 1.170
18.04 LTS bionic
Fixed 1.170
17.10 artful
Fixed 1.169.1
17.04 zesty
Fixed 1.164.2
16.04 LTS xenial
Fixed 1.157.14
14.04 LTS trusty
Fixed 1.127.24
wpa 21.04 hirsute
Fixed 2.4-0ubuntu10
20.10 groovy
Fixed 2.4-0ubuntu10
20.04 LTS focal
Fixed 2.4-0ubuntu10
19.10 eoan
Fixed 2.4-0ubuntu10
19.04 disco
Fixed 2.4-0ubuntu10
18.10 cosmic
Fixed 2.4-0ubuntu10
18.04 LTS bionic
Fixed 2.4-0ubuntu10
17.10 artful
Fixed 2.4-0ubuntu10
17.04 zesty
Fixed 2.4-0ubuntu9.1
16.04 LTS xenial
Fixed 2.4-0ubuntu6.2
14.04 LTS trusty
Fixed 2.1-0ubuntu1.5

Notes

mdeslaur

related to intel wireless firmware issue CVE-2017-5729

Severity score breakdown

Parameter Value
Base score 5.3 · Medium
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Scope Unchanged
Confidentiality None
Integrity impact High
Availability impact None
Vector CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N