CVE catalog

CVE-2017-13078

firmware-nonfree: CVE-2017-13078

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.07% · Oct 25, 2026

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwpasid2:2.11-4fixed
Debianwpaforky2:2.11-4fixed
Debianwpatrixie2:2.10-24fixed
Debianwpabookworm2:2.10-12+deb12u3fixed
Debianwpabookworm-security2:2.10-12+deb12u2fixed
Debianfirmware-nonfreesid20260916-1fixed
Debianfirmware-nonfreeforky20260916-1fixed
Debianfirmware-nonfreetrixie20250410-2fixed
Debianfirmware-nonfreebookworm20230210-5fixed
Alpinehostapd3.102.6-r2fixed
Alpinehostapd3.112.6-r2fixed
Alpinehostapd3.122.6-r2fixed
Alpinehostapd3.132.6-r2fixed
Alpinehostapd3.142.6-r2fixed
Alpinehostapd3.152.6-r2fixed
Alpinehostapd3.162.6-r2fixed
Alpinehostapd3.172.6-r2fixed
Alpinehostapd3.182.6-r2fixed
Alpinehostapd3.192.6-r2fixed
Alpinehostapd3.202.6-r2fixed
Alpinehostapd3.212.6-r2fixed
Alpinehostapd3.222.6-r2fixed
Alpinehostapd3.232.6-r2fixed
Alpinehostapd3.242.6-r2fixed
Alpinehostapd3.52.6-r1fixed
Alpinehostapd3.62.6-r2fixed
Alpinehostapd3.72.6-r2fixed
Alpinehostapd3.82.6-r2fixed
Alpinehostapd3.92.6-r2fixed
Alpinewpa_supplicant3.102.6-r7fixed
Alpinewpa_supplicant3.112.6-r7fixed
Alpinewpa_supplicant3.122.6-r7fixed
Alpinewpa_supplicant3.132.6-r7fixed
Alpinewpa_supplicant3.142.6-r7fixed
Alpinewpa_supplicant3.152.6-r7fixed
Alpinewpa_supplicant3.162.6-r7fixed
Alpinewpa_supplicant3.172.6-r7fixed
Alpinewpa_supplicant3.182.6-r7fixed
Alpinewpa_supplicant3.192.6-r7fixed
Alpinewpa_supplicant3.202.6-r7fixed
Alpinewpa_supplicant3.212.6-r7fixed
Alpinewpa_supplicant3.222.6-r7fixed
Alpinewpa_supplicant3.232.6-r7fixed
Alpinewpa_supplicant3.242.6-r7fixed
Alpinewpa_supplicant3.52.6-r2fixed
Alpinewpa_supplicant3.62.6-r4fixed
Alpinewpa_supplicant3.72.6-r7fixed
Alpinewpa_supplicant3.82.6-r7fixed
Alpinewpa_supplicant3.92.6-r7fixed
Opensusehostapdtumbleweed2.9-6.2fixed
Susewpa_supplicantlinux enterprise point of sale 11 sp30.7.1-6.18.3.1fixed
Susewpa_supplicantlinux enterprise server 11 sp3-ltss0.7.1-6.18.3.1fixed
Susewpa_supplicantlinux enterprise server 11 sp3-teradata0.7.1-6.18.3.1fixed
Susewpa_supplicantlinux enterprise server 11 sp40.7.1-6.18.3.1fixed
Susewpa_supplicantlinux enterprise server for sap applications 11 sp40.7.1-6.18.3.1fixed
Susewpa_supplicantopenstack cloud 62.2-15.3.1fixed
Susewpa_supplicantlinux enterprise desktop 12 sp22.2-15.3.1fixed
Susewpa_supplicantlinux enterprise desktop 12 sp32.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server for raspberry pi 12 sp22.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server for sap applications 12 sp12.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server 12-ltss2.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server 12 sp1-ltss2.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server 12 sp22.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server for sap applications 12 sp22.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server 12 sp32.2-15.3.1fixed
Susewpa_supplicantlinux enterprise server for sap applications 12 sp32.2-15.3.1fixed
Ubuntuwpa14.041.0-3ubuntu2vulnerable
Ubuntuwpa14.041.0-3ubuntu3vulnerable
Ubuntuwpa14.041.0-3ubuntu4vulnerable
Ubuntuwpa14.042.1-0ubuntu1vulnerable
Ubuntuwpa14.042.1-0ubuntu1.1vulnerable
Ubuntuwpa14.042.1-0ubuntu1.2vulnerable
Ubuntuwpa14.042.1-0ubuntu1.3vulnerable
Ubuntuwpa14.042.1-0ubuntu1.4vulnerable
Ubuntuwpa14.042.1-0ubuntu1.5fixed
Ubuntuwpa16.042.4-0ubuntu3vulnerable
Ubuntuwpa16.042.4-0ubuntu4vulnerable
Ubuntuwpa16.042.4-0ubuntu5vulnerable
Ubuntuwpa16.042.4-0ubuntu6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwpasourcesid2:2.4-1.1not yet assignedNot reportedNot reported
Debianwpasourceforky2:2.4-1.1not yet assignedNot reportedNot reported
Debianwpasourcetrixie2:2.4-1.1not yet assignedNot reportedNot reported
Debianwpasourcebookworm2:2.4-1.1not yet assignedNot reportedNot reported
Debianfirmware-nonfreesourcesid20180825-1not yet assignedNot reportedNot reported
Debianfirmware-nonfreesourceforky20180825-1not yet assignedNot reportedNot reported
Debianfirmware-nonfreesourcetrixie20180825-1not yet assignedNot reportedNot reported
Debianfirmware-nonfreesourcebookworm20180825-1not yet assignedNot reportedNot reported
Alpinehostapdapk3.102.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.112.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.122.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.132.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.142.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.152.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.162.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.172.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.182.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.192.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.202.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.212.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.222.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.232.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.242.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.52.6-r1Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.62.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.72.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.82.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinehostapdapk3.92.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.102.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.112.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.122.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.132.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.142.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.152.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.162.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.172.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.182.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.192.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.202.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.212.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.222.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.232.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.242.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.52.6-r2Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.62.6-r4Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.72.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.82.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Alpinewpa_supplicantapk3.92.6-r7Not reportedALPINE-CVE-2017-13078Not reported
Opensusehostapdrpmtumbleweed2.9-6.2Not reportedOPENSUSE-SU-2024:10846-1Not reported
Susewpa_supplicantrpmlinux enterprise point of sale 11 sp30.7.1-6.18.3.1Not reportedSUSE-SU-2017:2752-1Not reported
Susewpa_supplicantrpmlinux enterprise server 11 sp3-ltss0.7.1-6.18.3.1Not reportedSUSE-SU-2017:2752-1Not reported
Susewpa_supplicantrpmlinux enterprise server 11 sp3-teradata0.7.1-6.18.3.1Not reportedSUSE-SU-2017:2752-1Not reported
Susewpa_supplicantrpmlinux enterprise server 11 sp40.7.1-6.18.3.1Not reportedSUSE-SU-2017:2752-1Not reported
Susewpa_supplicantrpmlinux enterprise server for sap applications 11 sp40.7.1-6.18.3.1Not reportedSUSE-SU-2017:2752-1Not reported
Susewpa_supplicantrpmopenstack cloud 62.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise desktop 12 sp22.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise desktop 12 sp32.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server for raspberry pi 12 sp22.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server for sap applications 12 sp12.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server 12-ltss2.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server 12 sp1-ltss2.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server 12 sp22.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server for sap applications 12 sp22.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server 12 sp32.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Susewpa_supplicantrpmlinux enterprise server for sap applications 12 sp32.2-15.3.1Not reportedSUSE-SU-2017:2745-1Not reported
Ubuntuwpadeb14.042.1-0ubuntu1.5Not reportedUBUNTU-CVE-2017-13078Not reported
Ubuntuwpadeb16.042.4-0ubuntu6.2Not reportedUBUNTU-CVE-2017-13078Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [eapoltest]Fixed

    Source package: [wpa]

    Details (4)
    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.4-1.1

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.4-1.1

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.4-1.1

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.4-1.1

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

  • Source package: [firmware-nonfree]

    Details (2)
    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

    • 20230210-5 · all · bookworm

      Fixed · Fixed: 20180825-1

      dsa · firmware-nonfree · debian · bookworm; dsa · firmware-nonfree · debian · 12

Next results

Observed:

References