New wpa_supplicant packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

According to the versions of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A new exploitation technique called key reinstallation     attacks (KRACK) affecting WPA2 has been discovered. A     remote attacker within Wi-Fi range could exploit these     attacks to decrypt Wi-Fi traffic or possibly inject     forged Wi-Fi packets by manipulating cryptographic     handshakes used by the WPA2 protocol. (CVE-2017-13077,     CVE-2017-13078, CVE-2017-13080, CVE-2017-13082,     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

  - Wi-Fi Protected Access (WPA and WPA2) that supports     IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the four-way     handshake, allowing an attacker within radio range to     spoof frames from access points to     clients.(CVE-2017-13079)

  - Wi-Fi Protected Access (WPA and WPA2) that supports     IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the group key     handshake, allowing an attacker within radio range to     spoof frames from access points to     clients.(CVE-2017-13081)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote HP LaserJet printer is potentially affected by the following vulnerabilities:
  - Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)     Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay,     decrypt, or spoof frames. (CVE-2017-13077)

  - Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the     four-way handshake, allowing an attacker within radio range to replay frames from access points to     clients. (CVE-2017-13078)

  - Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity     Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to     spoof frames from access points to clients. (CVE-2017-13081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Fix the for the Key Reinstallation Attacks ==========================================

  - hostapd: Avoid key reinstallation in FT handshake     (CVE-2017-13082)

  - Fix PTK rekeying to generate a new ANonce

  - Prevent reinstallation of an already in-use group key     and extend protection of GTK/IGTK reinstallation of     WNM-Sleep Mode cases (CVE-2017-13078, CVE-2017-13079,     CVE-2017-13080, CVE-2017-13081, CVE-2017-13087,     CVE-2017-13088)

  - Prevent installation of an all-zero TK

  - TDLS: Reject TPK-TK reconfiguration

  - WNM: Ignore WNM-Sleep Mode Response without pending     request

  - FT: Do not allow multiple Reassociation Response frames

Upstream advisory:
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-me ssages.txt

Details and the paper: https://www.krackattacks.com/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3455-1 advisory.

    Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly handled WPA2. A remote attacker could     use this issue with key reinstallation attacks to obtain sensitive information. (CVE-2017-13077,     CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,     CVE-2017-13087, CVE-2017-13088)

    Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase     parameters. A remote attacker could use this issue to cause a denial of service. (CVE-2016-4476)

    Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase     parameters. A local attacker could use this issue to cause a denial of service, or possibly execute     arbitrary code. (CVE-2016-4477)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
103944	Slackware 14.0 / 14.1 / 14.2 / current : wpa_supplicant (SSA:2017-291-02) (KRACK)	Nessus	Slackware Local Security Checks	10/19/2017	11/18/2025	high
104577	EulerOS 2.0 SP2 : wpa_supplicant (EulerOS-SA-2017-1242)	Nessus	Huawei Local Security Checks	11/16/2017	11/14/2025	high
181598	HP LaserJet Printers Multiple Vulnerabilities (HPSBPI03574)	Nessus	Misc.	9/19/2023	2/19/2025	medium
106004	Fedora 27 : 1:wpa_supplicant (2017-f45e844a85) (KRACK)	Nessus	Fedora Local Security Checks	1/15/2018	11/4/2025	high
103863	Ubuntu 14.04 LTS / 16.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-3455-1)	Nessus	Ubuntu Local Security Checks	10/17/2017	8/27/2024	high
103896	Fedora 26 : 1:wpa_supplicant (2017-60bfb576b7) (KRACK)	Nessus	Fedora Local Security Checks	10/18/2017	11/18/2025	high

Detections

Analytics

Plugins Search

high

high

medium

high

high

high