vulnerability

CentOS Linux: CVE-2017-13088: Important: wpa_supplicant security update (CESA-2017:2907)

Try Surface Command
Back to search
Severity
3
CVSS
(AV:A/AC:M/Au:N/C:N/I:P/A:N)
Published
Oct 16, 2017
Added
Oct 18, 2017
Modified
May 25, 2023

Description

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

Solutions

centos-upgrade-wpa_supplicantcentos-upgrade-wpa_supplicant-debuginfo

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today