vulnerability

Red Hat: CVE-2017-13088: Important: wpa_supplicant security update (RHSA-2017:2907)

Severity
3
CVSS
(AV:A/AC:M/Au:N/C:N/I:P/A:N)
Published
Oct 16, 2017
Added
Oct 25, 2017
Modified
Mar 3, 2021

Description

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

Solutions

redhat-upgrade-wpa_supplicantredhat-upgrade-wpa_supplicant-debuginfo

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.