CVE-2017-13086

Publication date 16 October 2017

Last updated 25 August 2025

Ubuntu priority

High

Why this priority?

Cvss 3 Severity Score

6.8 · Medium

Score breakdown

Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Status

Package Ubuntu Release Status
wpa 17.04 zesty
Fixed 2.4-0ubuntu9.1
16.04 LTS xenial
Fixed 2.4-0ubuntu6.2
14.04 LTS trusty
Fixed 2.1-0ubuntu1.5

Severity score breakdown

Parameter Value
Base score 6.8 · Medium
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact None
Vector CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

Related Ubuntu Security Notices (USN)

    • USN-3455-1
    • wpa_supplicant and hostapd vulnerabilities
    • 16 October 2017

Other references