CVE-2017-13081

MEDIUM 5.3CVE-2017-13081 · Published 17/10/2017 · updated 17/06/2026

In short

CVE-2017-13081 is a MEDIUM (CVSS 5.3) vulnerability affecting hostapd (w1.fi), wpa supplicant (w1.fi).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hostapd w1.fi	`= 0.2.4= 0.2.5= 0.2.6= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6`	No fix yet
wpa supplicant w1.fi	`= 0.2.4= 0.2.5= 0.2.6= 0.2.7= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.8= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6`	No fix yet

Description

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.

References

lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html · Third Party Advisory
arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt · Third Party Advisory
debian.org/security/2017/dsa-3999 · Third Party Advisory
kb.cert.org/vuls/id/228519 · Third Party Advisory
oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
securityfocus.com/bid/101274 · Third Party Advisory
securitytracker.com/id/1039573 · Third Party Advisory
securitytracker.com/id/1039576 · Third Party Advisory
securitytracker.com/id/1039577 · Third Party Advisory

More vulnerabilities in hostapd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hostapd

w1.fi

= 0.2.4= 0.2.5= 0.2.6= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6

No fix yet

wpa supplicant

w1.fi

= 0.2.4= 0.2.5= 0.2.6= 0.2.7= 0.2.8= 0.3.10= 0.3.11= 0.3.7= 0.3.8= 0.3.9= 0.4.10= 0.4.11= 0.4.7= 0.4.8= 0.4.9= 0.5.10= 0.5.11= 0.5.7= 0.5.8= 0.5.9= 0.6.10= 0.6.8= 0.6.9= 0.7.3= 1.0= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6

No fix yet

More vulnerabilities in hostapd

See all →