CVE-2017-13078

MEDIUM 5.3CVE-2017-13078 · Published 17/10/2017 · updated 17/06/2026

In short

CVE-2017-13078 is a MEDIUM (CVSS 5.3) vulnerability affecting hostapd (w1.fi), wpa supplicant (w1.fi).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hostapd w1.fi	`= 0.2.4= 0.2.5= 0.2.6= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6`	No fix yet
wpa supplicant w1.fi	`= 0.2.4= 0.2.5= 0.2.6= 0.2.7= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.8= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6`	No fix yet

Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

References

lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html · Third Party Advisory
arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt · Third Party Advisory
debian.org/security/2017/dsa-3999 · Third Party Advisory
kb.cert.org/vuls/id/228519 · Third Party Advisory
oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
securityfocus.com/bid/101274 · Third Party Advisory
securitytracker.com/id/1039573 · Third Party Advisory
securitytracker.com/id/1039576 · Third Party Advisory

More vulnerabilities in hostapd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hostapd

w1.fi

= 0.2.4= 0.2.5= 0.2.6= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6

No fix yet

wpa supplicant

w1.fi

= 0.2.4= 0.2.5= 0.2.6= 0.2.7= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.8= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6

No fix yet

More vulnerabilities in hostapd

See all →