This script is Copyright (C) 2017 Tenable Network Security, Inc.
The remote Debian host is missing a security-related update.
Mathy Vanhoef of the imec-DistriNet research group of KU Leuven
discovered multiple vulnerabilities in the WPA protocol, used for
authentication in wireless networks. Those vulnerabilities apply to
both the access point (implemented in hostapd) and the station
(implemented in wpa_supplicant).
An attacker exploiting the vulnerabilities could force the vulnerable
system to reuse cryptographic session keys, enabling a range of
cryptographic attacks against the ciphers used in WPA1 and WPA2.
More information can be found in the researchers's paper, Key
Reinstallation Attacks: Forcing Nonce Reuse in WPA2.
- CVE-2017-13077 :
reinstallation of the pairwise key in the Four-way
- CVE-2017-13078 :
reinstallation of the group key in the Four-way
- CVE-2017-13079 :
reinstallation of the integrity group key in the
- CVE-2017-13080 :
reinstallation of the group key in the Group Key
- CVE-2017-13081 :
reinstallation of the integrity group key in the Group
- CVE-2017-13082 :
accepting a retransmitted Fast BSS Transition
Reassociation Request and reinstalling the pairwise key
while processing it
- CVE-2017-13086 :
reinstallation of the Tunneled Direct-Link Setup (TDLS)
PeerKey (TPK) key in the TDLS handshake
- CVE-2017-13087 :
reinstallation of the group key (GTK) when processing a
Wireless Network Management (WNM) Sleep Mode Response
- CVE-2017-13088 :
reinstallation of the integrity group key (IGTK) when
processing a Wireless Network Management (WNM) Sleep
Mode Response frame
See also :
Upgrade the wpa packages.
For the oldstable distribution (jessie), these problems have been
fixed in version 2.3-1+deb8u5.
For the stable distribution (stretch), these problems have been fixed
in version 2:2.4-1+deb9u1.
Risk factor :
Medium / CVSS Base Score : 5.8
Family: Debian Local Security Checks
Nessus Plugin ID: 103859 ()
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now