Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.812042
Category:Red Hat Local Security Checks
Title:RedHat Update for wpa_supplicant RHSA-2017:2907-01
Summary:The remote host is missing an update for the 'wpa_supplicant'; package(s) announced via the referenced advisory.
Description:Summary:
The remote host is missing an update for the 'wpa_supplicant'
package(s) announced via the referenced advisory.

Vulnerability Insight:
The wpa_supplicant packages contain an 802.1X
Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP
authentication methods. They implement key negotiation with a WPA Authenticator
for client stations and controls the roaming and IEEE 802.11 authentication and
association of the WLAN driver.

Security Fix(es):

* A new exploitation technique called key reinstallation attacks (KRACK)
affecting WPA2 has been discovered. A remote attacker within Wi-Fi range
could exploit these attacks to decrypt Wi-Fi traffic or possibly inject
forged Wi-Fi packets by manipulating cryptographic handshakes used by the
WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080,
CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

Red Hat would like to thank CERT for reporting these issues. Upstream
acknowledges Mathy Vanhoef (University of Leuven) as the original reporter
of these issues.

Affected Software/OS:
wpa_supplicant on Red Hat Enterprise Linux Server (v. 7)

Solution:
Please Install the Updated Packages.

CVSS Score:
5.8

CVSS Vector:
AV:A/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-13077
Common Vulnerability Exposure (CVE) ID: CVE-2017-13078
Common Vulnerability Exposure (CVE) ID: CVE-2017-13080
Common Vulnerability Exposure (CVE) ID: CVE-2017-13082
Common Vulnerability Exposure (CVE) ID: CVE-2017-13086
Common Vulnerability Exposure (CVE) ID: CVE-2017-13087
Common Vulnerability Exposure (CVE) ID: CVE-2017-13088
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.