Description
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securitytracker.com/id/1039581 ↗
- http://www.securityfocus.com/bid/101274 ↗
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html ↗
- http://www.debian.org/security/2017/dsa-3999 ↗
- http://www.securitytracker.com/id/1039578 ↗
- https://access.redhat.com/security/vulnerabilities/kracks ↗
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa ↗
- https://access.redhat.com/errata/RHSA-2017:2911 ↗
- https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt ↗
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt ↗
- http://www.securitytracker.com/id/1039577 ↗
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html ↗
- https://source.android.com/security/bulletin/2017-11-01 ↗
- https://security.gentoo.org/glsa/201711-03 ↗
- https://access.redhat.com/errata/RHSA-2017:2907 ↗
- https://support.lenovo.com/us/en/product_security/LEN-17420 ↗
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc ↗
- https://www.krackattacks.com/ ↗
- http://www.securitytracker.com/id/1039573 ↗
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html ↗
- http://www.securitytracker.com/id/1039576 ↗
- http://www.kb.cert.org/vuls/id/228519 ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf ↗
- https://cert.vde.com/en-us/advisories/vde-2017-005 ↗
- http://www.ubuntu.com/usn/USN-3455-1 ↗