Mathy Vanhoef of the imec-DistriNet research group of KU Leuven discovered multiple vulnerabilities in the WPA protocol, used for authentication in wireless networks. Those vulnerabilities apply to both the access point (implemented in hostapd) and the station (implemented in wpa_supplicant).

An attacker exploiting the vulnerabilities could force the vulnerable system to reuse cryptographic session keys, enabling a range of cryptographic attacks against the ciphers used in WPA1 and WPA2. 

More information can be found in the researchers's paper, Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2.

  - CVE-2017-13077 :
    reinstallation of the pairwise key in the Four-way     handshake

  - CVE-2017-13078 :
    reinstallation of the group key in the Four-way     handshake

  - CVE-2017-13079 :
    reinstallation of the integrity group key in the     Four-way handshake

  - CVE-2017-13080 :
    reinstallation of the group key in the Group Key     handshake

  - CVE-2017-13081 :
    reinstallation of the integrity group key in the Group     Key handshake

  - CVE-2017-13082 :
    accepting a retransmitted Fast BSS Transition     Reassociation Request and reinstalling the pairwise key     while processing it

  - CVE-2017-13086 :
    reinstallation of the Tunneled Direct-Link Setup (TDLS)     PeerKey (TPK) key in the TDLS handshake

  - CVE-2017-13087 :
    reinstallation of the group key (GTK) when processing a     Wireless Network Management (WNM) Sleep Mode Response     frame

  - CVE-2017-13088 :
    reinstallation of the integrity group key (IGTK) when     processing a Wireless Network Management (WNM) Sleep     Mode Response frame

According to its self-reported version, the remote networking device is running a version of UniFi OS prior to 3.9.3.7537. It, therefore, vulnerable to multiple vulnerabilities discovered in the WPA2 handshake protocol.

An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.

Security Fix(es) :

* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:2907 advisory.

    The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i /     RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for     client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN     driver.

    Security Fix(es):

    * A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been     discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or     possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol.
    (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087,     CVE-2017-13088)

    Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef     (University of Leuven) as the original reporter of these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for wpa_supplicant is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.

Security Fix(es) :

* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13087)

Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.

A vulnerability was found in how WPA code can be triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by replaying a specific frame that is used to manage the keys. Such reinstallation of the encryption key can result in two different types of vulnerabilities: disabling replay protection and significantly reducing the security of encryption to the point of allowing frames to be decrypted or some parts of the keys to be determined by an attacker depending on which cipher is used.

Those issues are commonly known under the 'KRACK' appelation.
According to US-CERT, 'the impact of exploiting these vulnerabilities includes decryption, packet replay, TCP connection hijacking, HTTP content injection, and others.'

CVE-2017-13077

Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.

CVE-2017-13078

Reinstallation of the group key (GTK) in the 4-way handshake.

CVE-2017-13079

Reinstallation of the integrity group key (IGTK) in the 4-way handshake.

CVE-2017-13080

Reinstallation of the group key (GTK) in the group key handshake.

CVE-2017-13081

Reinstallation of the integrity group key (IGTK) in the group key handshake.

CVE-2017-13082

Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.

CVE-2017-13084

Reinstallation of the STK key in the PeerKey handshake.

CVE-2017-13086

reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.

CVE-2017-13087

reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.

CVE-2017-13088

reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.

For Debian 7 'Wheezy', these problems have been fixed in version 1.0-3+deb7u5. Note that the latter two vulnerabilities (CVE-2017-13087 and CVE-2017-13088) were mistakenly marked as fixed in the changelog whereas they simply did not apply to the 1.0 version of the WPA source code, which doesn't implement WNM sleep mode responses.

We recommend that you upgrade your wpa packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201711-03 (hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks)

    WiFi Protected Access (WPA and WPA2) and it&rsquo;s associated technologies       are all vulnerable to the KRACK attacks. Please review the referenced CVE       identifiers for details.
  Impact :

    An attacker can carry out the KRACK attacks on a wireless network in       order to gain access to network clients. Once achieved, the attacker can       potentially harvest confidential information (e.g. HTTP/HTTPS), inject       malware, or perform a myriad of other attacks.
  Workaround :

    There is no known workaround at this time.

According to the versions of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A new exploitation technique called key reinstallation     attacks (KRACK) affecting WPA2 has been discovered. A     remote attacker within Wi-Fi range could exploit these     attacks to decrypt Wi-Fi traffic or possibly inject     forged Wi-Fi packets by manipulating cryptographic     handshakes used by the WPA2 protocol. (CVE-2017-13077,     CVE-2017-13078, CVE-2017-13080, CVE-2017-13082,     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

  - Wi-Fi Protected Access (WPA and WPA2) that supports     IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the four-way     handshake, allowing an attacker within radio range to     spoof frames from access points to     clients.(CVE-2017-13079)

  - Wi-Fi Protected Access (WPA and WPA2) that supports     IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the group key     handshake, allowing an attacker within radio range to     spoof frames from access points to     clients.(CVE-2017-13081)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.

Security Fix(es) :

* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the remote pfSense install is affected by multiple vulnerabilities as stated in the referenced vendor advisories.

According to its self-reported version, the remote networking device is running a version of MikroTik 6.9.X prior to 6.39.3, 6.40.x < 6.40.4, or 6.41rc. It, therefore, vulnerable to multiple vulnerabilities discovered in the WPA2 handshake protocol.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
103859	Debian DSA-3999-1 : wpa - security update (KRACK)	Nessus	Debian Local Security Checks	2017/10/17	2025/11/18	high
103875	Ubiquiti Networks UniFi < 3.9.3.7537 (KRACK)	Nessus	Misc.	2017/10/17	2025/11/18	high
103881	CentOS 7 : wpa_supplicant (CESA-2017:2907) (KRACK)	Nessus	CentOS Local Security Checks	2017/10/18	2025/11/18	high
103916	RHEL 7 : wpa_supplicant (RHSA-2017:2907)	Nessus	Red Hat Local Security Checks	2017/10/18	2025/11/18	high
103946	CentOS 6 : wpa_supplicant (CESA-2017:2911) (KRACK)	Nessus	CentOS Local Security Checks	2017/10/19	2025/11/18	medium
104299	Debian DLA-1150-1 : wpa security update (KRACK)	Nessus	Debian Local Security Checks	2017/11/1	2025/11/17	high
104511	GLSA-201711-03 : hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks (KRACK)	Nessus	Gentoo Local Security Checks	2017/11/13	2025/11/14	high
104576	EulerOS 2.0 SP1 : wpa_supplicant (EulerOS-SA-2017-1241)	Nessus	Huawei Local Security Checks	2017/11/16	2025/11/14	high
104581	Virtuozzo 7 : wpa_supplicant (VZLSA-2017-2907)	Nessus	Virtuozzo Local Security Checks	2017/11/16	2025/11/14	high
109037	pfSense < 2.3.5 Multiple Vulnerabilities (KRACK)	Nessus	Firewalls	2018/4/13	2020/5/8	critical
103857	MikroTik RouterOS < 6.39.3 / 6.40.4 / 6.41rc (KRACK)	Nessus	Misc.	2017/10/16	2025/11/18	high

检测

插件搜索

high

high

high

high

medium

high

high

high

high

critical

high