CVE-2017-13080

Publication date 16 October 2017

Last updated 24 July 2024


Ubuntu priority

Cvss 3 Severity Score

5.3 · Medium

Score breakdown

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

Read the notes from the security team

Status

Package Ubuntu Release Status
linux-firmware 21.04 hirsute
Fixed 1.170
20.10 groovy
Fixed 1.170
20.04 LTS focal
Fixed 1.170
19.10 eoan
Fixed 1.170
19.04 disco
Fixed 1.170
18.10 cosmic
Fixed 1.170
18.04 LTS bionic
Fixed 1.170
17.10 artful
Fixed 1.169.1
17.04 zesty
Fixed 1.164.2
16.04 LTS xenial
Fixed 1.157.14
14.04 LTS trusty
Fixed 1.127.24
wpa 21.04 hirsute
Fixed 2.4-0ubuntu10
20.10 groovy
Fixed 2.4-0ubuntu10
20.04 LTS focal
Fixed 2.4-0ubuntu10
19.10 eoan
Fixed 2.4-0ubuntu10
19.04 disco
Fixed 2.4-0ubuntu10
18.10 cosmic
Fixed 2.4-0ubuntu10
18.04 LTS bionic
Fixed 2.4-0ubuntu10
17.10 artful
Fixed 2.4-0ubuntu10
17.04 zesty
Fixed 2.4-0ubuntu9.1
16.04 LTS xenial
Fixed 2.4-0ubuntu6.2
14.04 LTS trusty
Fixed 2.1-0ubuntu1.5

Notes


mdeslaur

related to intel wireless firmware issue CVE-2017-5729

Severity score breakdown

Parameter Value
Base score 5.3 · Medium
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Scope Unchanged
Confidentiality None
Integrity impact High
Availability impact None
Vector CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N