The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3505-1 advisory.

    Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in     relation to Wake on WLAN. A remote attacker could use this issue with key reinstallation attacks to obtain     sensitive information. (CVE-2017-13080, CVE-2017-13081)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ArubaOS on the remote device is affected by multiple vulnerabilities related to the KRACK attacks. This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network.

Note: ArbuaOS devices are only vulnerable to CVE-2017-13077, CVE-2017-13078,CVE-2017-13079, CVE-2017-13080, and CVE-2017-13081 while operating as a Wi-Fi supplicant in Mesh mode.

wpa_supplicant developers report :

A vulnerability was found in how a number of implementations can be triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by replaying a specific frame that is used to manage the keys.

Fix the for the Key Reinstallation Attacks ==========================================

  - hostapd: Avoid key reinstallation in FT handshake     (CVE-2017-13082)

  - Fix PTK rekeying to generate a new ANonce

  - Prevent reinstallation of an already in-use group key     and extend protection of GTK/IGTK reinstallation of     WNM-Sleep Mode cases (CVE-2017-13078, CVE-2017-13079,     CVE-2017-13080, CVE-2017-13081, CVE-2017-13087,     CVE-2017-13088)

  - Prevent installation of an all-zero TK

  - TDLS: Reject TPK-TK reconfiguration

  - WNM: Ignore WNM-Sleep Mode Response without pending     request

  - FT: Do not allow multiple Reassociation Response frames

Upstream advisory:
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-me ssages.txt

Details and the paper: https://www.krackattacks.com/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the firmware for Broadcom BCM43xx wifi chips that may lead to a privilege escalation or loss of confidentiality.

CVE-2016-0801

Broadgate Team discovered flaws in packet processing in the Broadcom wifi firmware and proprietary drivers that could lead to remote code execution. However, this vulnerability is not believed to affect the drivers used in Debian.

CVE-2017-0561

Gal Beniamini of Project Zero discovered a flaw in the TDLS implementation in Broadcom wifi firmware. This could be exploited by an attacker on the same WPA2 network to execute code on the wifi microcontroller.

CVE-2017-9417 / #869639

Nitay Artenstein of Exodus Intelligence discovered a flaw in the WMM implementation in Broadcom wifi firmware. This could be exploited by a nearby attacker to execute code on the wifi microcontroller.

CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081

Mathy Vanhoef of the imec-DistriNet research group of KU Leuven discovered multiple vulnerabilities in the WPA protocol used for authentication in wireless networks, dubbed 'KRACK'.

An attacker exploiting the vulnerabilities could force the vulnerable system to reuse cryptographic session keys, enabling a range of cryptographic attacks against the ciphers used in WPA1 and WPA2.

These vulnerabilities are only being fixed for certain Broadcom wifi chips, and might still be present in firmware for other wifi hardware.

For Debian 8 'Jessie', these problems have been fixed in version 20161130-4~deb8u1. This version also adds new firmware and packages for use with Linux 4.9, and re-adds firmware-{adi,ralink} as transitional packages.

We recommend that you upgrade your firmware-nonfree packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for hostapd fixes the following issues :

  - Fix KRACK attacks on the AP side (boo#1063479,     CVE-2017-13078, CVE-2017-13079, CVE-2017-13080,     CVE-2017-13081, CVE-2017-13087, CVE-2017-13088) :

Hostap was updated to upstream release 2.6

  - fixed EAP-pwd last fragment validation     [http://w1.fi/security/2015-7/] (CVE-2015-5314)

  - fixed WPS configuration update vulnerability with     malformed passphrase [http://w1.fi/security/2016-1/]     (CVE-2016-4476)

  - extended channel switch support for VHT bandwidth     changes

  - added support for configuring new ANQP-elements with     anqp_elem=<InfoID>:<hexdump of payload>

  - fixed Suite B 192-bit AKM to use proper PMK length     (note: this makes old releases incompatible with the     fixed behavior)

  - added no_probe_resp_if_max_sta=1 parameter to disable     Probe Response frame sending for not-associated STAs if     max_num_sta limit has been reached

  - added option (-S as command line argument) to request     all interfaces to be started at the same time

  - modified rts_threshold and fragm_threshold configuration     parameters to allow -1 to be used to disable     RTS/fragmentation

  - EAP-pwd: added support for Brainpool Elliptic Curves     (with OpenSSL 1.0.2 and newer)

  - fixed EAPOL reauthentication after FT protocol run

  - fixed FTIE generation for 4-way handshake after FT     protocol run

  - fixed and improved various FST operations

  - TLS server

  - support SHA384 and SHA512 hashes

  - support TLS v1.2 signature algorithm with SHA384 and     SHA512

  - support PKCS #5 v2.0 PBES2

  - support PKCS #5 with PKCS #12 style key decryption

  - minimal support for PKCS #12

  - support OCSP stapling (including ocsp_multi)

  - added support for OpenSSL 1.1 API changes

  - drop support for OpenSSL 0.9.8

  - drop support for OpenSSL 1.0.0

  - EAP-PEAP: support fast-connect crypto binding

  - RADIUS

  - fix Called-Station-Id to not escape SSID

  - add Event-Timestamp to all Accounting-Request packets

  - add Acct-Session-Id to Accounting-On/Off

  - add Acct-Multi-Session-Id ton Access-Request packets

  - add Service-Type (= Frames)

  - allow server to provide PSK instead of passphrase for     WPA-PSK Tunnel_password case

  - update full message for interim accounting updates

  - add Acct-Delay-Time into Accounting messages

  - add require_message_authenticator configuration option     to require CoA/Disconnect-Request packets to be     authenticated

  - started to postpone WNM-Notification frame sending by     100 ms so that the STA has some more time to configure     the key before this frame is received after the 4-way     handshake

  - VHT: added interoperability workaround for 80+80 and 160     MHz channels

  - extended VLAN support (per-STA vif, etc.)

  - fixed PMKID derivation with SAE

  - nl80211

  - added support for full station state operations

  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to     use unencrypted EAPOL frames

  - added initial MBO support; number of extensions to WNM     BSS Transition Management

  - added initial functionality for location related     operations

  - added assocresp_elements parameter to allow vendor     specific elements to be added into (Re)Association     Response frames

  - improved Public Action frame addressing

  - use Address 3 = wildcard BSSID in GAS response if a     query from an unassociated STA used that address

  - fix TX status processing for Address 3 = wildcard BSSID

  - add gas_address3 configuration parameter to control     Address 3 behavior

  - added command line parameter -i to override interface     parameter in hostapd.conf

  - added command completion support to hostapd_cli

  - added passive client taxonomy determination     (CONFIG_TAXONOMY=y compile option and 'SIGNATURE <addr>'     control interface command)

  - number of small fixes

hostapd was updated to upstream release 2.5

  - (CVE-2015-1863) is fixed in upstream release 2.5

  - fixed WPS UPnP vulnerability with HTTP chunked transfer     encoding [http://w1.fi/security/2015-2/] (CVE-2015-4141     boo#930077)

  - fixed WMM Action frame parser     [http://w1.fi/security/2015-3/] (CVE-2015-4142     boo#930078)

  - fixed EAP-pwd server missing payload length validation     [http://w1.fi/security/2015-4/] (CVE-2015-4143,     CVE-2015-4144, CVE-2015-4145, boo#930079)

  - fixed validation of WPS and P2P NFC NDEF record payload     length [http://w1.fi/security/2015-5/]

  - nl80211 :

  - fixed vendor command handling to check OUI properly

  - fixed hlr_auc_gw build with OpenSSL

  - hlr_auc_gw: allow Milenage RES length to be reduced

  - disable HT for a station that does not support WMM/QoS

  - added support for hashed password (NtHash) in EAP-pwd     server

  - fixed and extended dynamic VLAN cases

  - added EAP-EKE server support for deriving Session-Id

  - set Acct-Session-Id to a random value to make it more     likely to be unique even if the device does not have a     proper clock

  - added more 2.4 GHz channels for 20/40 MHz HT co-ex scan

  - modified SAE routines to be more robust and PWE     generation to be stronger against timing attacks

  - added support for Brainpool Elliptic Curves with SAE

  - increases maximum value accepted for cwmin/cwmax

  - added support for CCMP-256 and GCMP-256 as group ciphers     with FT

  - added Fast Session Transfer (FST) module

  - removed optional fields from RSNE when using FT with PMF     (workaround for interoperability issues with iOS 8.4)

  - added EAP server support for TLS session resumption

  - fixed key derivation for Suite B 192-bit AKM (this     breaks compatibility with the earlier version)

  - added mechanism to track unconnected stations and do     minimal band steering

  - number of small fixes

This update for wpa_supplicant fixes the following issues :

  - Several vulnerabilities in standard conforming     implementations of the WPA2 protocol have been     discovered and published under the code name KRACK. This     update remedies those issues in a backwards compatible     manner, i.e. the updated wpa_supplicant can interface     properly with both vulnerable and patched     implementations of WPA2, but an attacker won't be able     to exploit the KRACK weaknesses in those connections     anymore even if the other party is still vulnerable.
    [bsc#1056061, CVE-2017-13078, CVE-2017-13079,     CVE-2017-13080, CVE-2017-13081, CVE-2017-13087,     CVE-2017-13088]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201711-03 (hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks)

    WiFi Protected Access (WPA and WPA2) and it&rsquo;s associated technologies       are all vulnerable to the KRACK attacks. Please review the referenced CVE       identifiers for details.
  Impact :

    An attacker can carry out the KRACK attacks on a wireless network in       order to gain access to network clients. Once achieved, the attacker can       potentially harvest confidential information (e.g. HTTP/HTTPS), inject       malware, or perform a myriad of other attacks.
  Workaround :

    There is no known workaround at this time.

According to the versions of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A new exploitation technique called key reinstallation     attacks (KRACK) affecting WPA2 has been discovered. A     remote attacker within Wi-Fi range could exploit these     attacks to decrypt Wi-Fi traffic or possibly inject     forged Wi-Fi packets by manipulating cryptographic     handshakes used by the WPA2 protocol. (CVE-2017-13077,     CVE-2017-13078, CVE-2017-13080, CVE-2017-13082,     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

  - Wi-Fi Protected Access (WPA and WPA2) that supports     IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the four-way     handshake, allowing an attacker within radio range to     spoof frames from access points to     clients.(CVE-2017-13079)

  - Wi-Fi Protected Access (WPA and WPA2) that supports     IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the group key     handshake, allowing an attacker within radio range to     spoof frames from access points to     clients.(CVE-2017-13081)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Juniper ScreenOS installed on the remote host is affected by multiple vulnerabilities related to the KRACK attacks.
This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network.

Note that Juniper's products do not support Fast BSS Transition Reassociation and PeerKey Handshake so are Not Vulnerable to CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2017-13087, or CVE-2017-13088.

According to its self-reported version number, the remote pfSense install is affected by multiple vulnerabilities as stated in the referenced vendor advisories.

According to its self-reported version, the remote networking device is running a version of UniFi OS prior to 3.9.3.7537. It, therefore, vulnerable to multiple vulnerabilities discovered in the WPA2 handshake protocol.

This update for kernel-firmware fixes the following issues :

  - Update Intel WiFi firmwares for the 3160, 7260 and 7265     adapters.

Security issues fixed are part of the 'KRACK' attacks affecting the firmware :

  - CVE-2017-13080: The reinstallation of the Group Temporal     key could be used for replay attacks (bsc#1066295) :

  - CVE-2017-13081: The reinstallation of the Integrity     Group Temporal key could be used for replay attacks     (bsc#1066295) :

This update was imported from the SUSE:SLE-12-SP2:Update update project.

According to its self-reported version, the remote networking device is running a version of MikroTik 6.9.X prior to 6.39.3, 6.40.x < 6.40.4, or 6.41rc. It, therefore, vulnerable to multiple vulnerabilities discovered in the WPA2 handshake protocol.

Mathy Vanhoef of the imec-DistriNet research group of KU Leuven discovered multiple vulnerabilities in the WPA protocol, used for authentication in wireless networks. Those vulnerabilities apply to both the access point (implemented in hostapd) and the station (implemented in wpa_supplicant).

An attacker exploiting the vulnerabilities could force the vulnerable system to reuse cryptographic session keys, enabling a range of cryptographic attacks against the ciphers used in WPA1 and WPA2. 

More information can be found in the researchers's paper, Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2.

  - CVE-2017-13077 :
    reinstallation of the pairwise key in the Four-way     handshake

  - CVE-2017-13078 :
    reinstallation of the group key in the Four-way     handshake

  - CVE-2017-13079 :
    reinstallation of the integrity group key in the     Four-way handshake

  - CVE-2017-13080 :
    reinstallation of the group key in the Group Key     handshake

  - CVE-2017-13081 :
    reinstallation of the integrity group key in the Group     Key handshake

  - CVE-2017-13082 :
    accepting a retransmitted Fast BSS Transition     Reassociation Request and reinstalling the pairwise key     while processing it

  - CVE-2017-13086 :
    reinstallation of the Tunneled Direct-Link Setup (TDLS)     PeerKey (TPK) key in the TDLS handshake

  - CVE-2017-13087 :
    reinstallation of the group key (GTK) when processing a     Wireless Network Management (WNM) Sleep Mode Response     frame

  - CVE-2017-13088 :
    reinstallation of the integrity group key (IGTK) when     processing a Wireless Network Management (WNM) Sleep     Mode Response frame

A vulnerability was found in how WPA code can be triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by replaying a specific frame that is used to manage the keys. Such reinstallation of the encryption key can result in two different types of vulnerabilities: disabling replay protection and significantly reducing the security of encryption to the point of allowing frames to be decrypted or some parts of the keys to be determined by an attacker depending on which cipher is used.

Those issues are commonly known under the 'KRACK' appelation.
According to US-CERT, 'the impact of exploiting these vulnerabilities includes decryption, packet replay, TCP connection hijacking, HTTP content injection, and others.'

CVE-2017-13077

Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.

CVE-2017-13078

Reinstallation of the group key (GTK) in the 4-way handshake.

CVE-2017-13079

Reinstallation of the integrity group key (IGTK) in the 4-way handshake.

CVE-2017-13080

Reinstallation of the group key (GTK) in the group key handshake.

CVE-2017-13081

Reinstallation of the integrity group key (IGTK) in the group key handshake.

CVE-2017-13082

Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.

CVE-2017-13084

Reinstallation of the STK key in the PeerKey handshake.

CVE-2017-13086

reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.

CVE-2017-13087

reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.

CVE-2017-13088

reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.

For Debian 7 'Wheezy', these problems have been fixed in version 1.0-3+deb7u5. Note that the latter two vulnerabilities (CVE-2017-13087 and CVE-2017-13088) were mistakenly marked as fixed in the changelog whereas they simply did not apply to the 1.0 version of the WPA source code, which doesn't implement WNM sleep mode responses.

We recommend that you upgrade your wpa packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
105038	Ubuntu 14.04 LTS / 16.04 LTS : Linux firmware vulnerabilities (USN-3505-1)	Nessus	Ubuntu Local Security Checks	2017/12/6	2025/11/12	medium
103855	ArubaOS WPA2 Key Reinstallation Vulnerabilities (KRACK)	Nessus	Misc.	2017/10/16	2025/11/18	high
103862	FreeBSD : WPA packet number reuse with replayed messages and key reinstallation (d670a953-b2a1-11e7-a633-009c02a2ab30) (KRACK)	Nessus	FreeBSD Local Security Checks	2017/10/17	2025/11/18	high
103884	Fedora 25 : 1:wpa_supplicant (2017-12e76e8364) (KRACK)	Nessus	Fedora Local Security Checks	2017/10/18	2025/11/18	high
118888	Debian DLA-1573-1 : firmware-nonfree security update (KRACK)	Nessus	Debian Local Security Checks	2018/11/13	2024/7/24	critical
104237	openSUSE Security Update : hostapd (openSUSE-2017-1201) (KRACK)	Nessus	SuSE Local Security Checks	2017/10/30	2025/11/17	high
103920	SUSE SLES11 Security Update : wpa_supplicant (SUSE-SU-2017:2752-1) (KRACK)	Nessus	SuSE Local Security Checks	2017/10/18	2025/11/18	medium
104511	GLSA-201711-03 : hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks (KRACK)	Nessus	Gentoo Local Security Checks	2017/11/13	2025/11/14	high
104576	EulerOS 2.0 SP1 : wpa_supplicant (EulerOS-SA-2017-1241)	Nessus	Huawei Local Security Checks	2017/11/16	2025/11/14	high
105654	Juniper ScreenOS 6.3 SSG-5 and SSG-20 (KRACK)	Nessus	Firewalls	2018/1/8	2025/11/10	medium
109037	pfSense < 2.3.5 Multiple Vulnerabilities (KRACK)	Nessus	Firewalls	2018/4/13	2020/5/8	critical
103875	Ubiquiti Networks UniFi < 3.9.3.7537 (KRACK)	Nessus	Misc.	2017/10/17	2025/11/18	high
105219	openSUSE Security Update : kernel-firmware (openSUSE-2017-1317) (KRACK)	Nessus	SuSE Local Security Checks	2017/12/14	2025/11/12	medium
103857	MikroTik RouterOS < 6.39.3 / 6.40.4 / 6.41rc (KRACK)	Nessus	Misc.	2017/10/16	2025/11/18	high
103859	Debian DSA-3999-1 : wpa - security update (KRACK)	Nessus	Debian Local Security Checks	2017/10/17	2025/11/18	high
104299	Debian DLA-1150-1 : wpa security update (KRACK)	Nessus	Debian Local Security Checks	2017/11/1	2025/11/17	high

检测

插件搜索

medium

high

high

high

critical

high

medium

high

high

medium

critical

high

medium

high

high

high