HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2017-13082

CVSS 8.1v3.0pub. 2017-10-17upd. 2026-05-13

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
  • Canonical Ubuntu

    OS
    Canonical
    14.0416.0417.04
  • Debian

    OS
    Debian
    8.09.0
  • Freebsd

    OS
    Freebsd
    1010.41111.1
  • Opensuse Leap

    OS
    Opensuse
    42.242.3
  • Red Hat Enterprise Linux Desktop

    OS
    Redhat
    7
  • Red Hat Enterprise Linux Server

    OS
    Redhat
    7
  • SUSE Linux Enterprise Desktop

    OS
    Suse
    12
  • SUSE Linux Enterprise Point Of Sale

    OS
    Suse
    11
  • SUSE Linux Enterprise Server

    OS
    Suse
    1112
  • SUSE Openstack Cloud

    OS
    Suse
    6
  • W1.fi Hostapd

    APP
    W1.Fi
    0.2.40.2.50.2.60.2.80.3.100.3.110.3.70.3.90.4.100.4.110.4.70.4.80.4.90.5.100.5.11+ 16 more
  • W1.fi Wpa Supplicant

    APP
    W1.Fi
    0.2.40.2.50.2.60.2.70.2.80.3.100.3.110.3.70.3.80.3.90.4.100.4.110.4.70.4.80.4.9+ 18 more
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓same product

RCE przez deserializację PHP w Roundcube Webmail (parametr _from)

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2025-24201CRITICAL10.0⚠ KEVPL ✓same product

Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki