Critical Vulnerability in Hostapd and Wpa_supplicant: Key Reinstallation Attack
Summary
ALPINE-CVE-2017-13077: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames... Affects hostapd versions < 2.6-r2. Fixed in 2.6-r2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Hostapd and Wpa_supplicant are essential components in managing wireless network connections, providing functionalities such as authentication and encryption for Wi-Fi networks. They are widely used in various Linux distributions, including Alpine Linux. The vulnerability in question affects the security of the WPA and WPA2 protocols, potentially allowing unauthorized access to sensitive data transmitted over the network.
Vulnerability Detail
The vulnerability, identified as CVE-2017-13077, arises from a flaw in the Wi-Fi Protected Access (WPA and WPA2) protocols, which allows an attacker within radio range to exploit the four-way handshake process. By reinstalling the Pairwise Transient Key (PTK) Temporal Key (TK), an attacker can replay, decrypt, or spoof frames, leading to unauthorized access and data breaches. This vulnerability poses a significant risk to the confidentiality and integrity of wireless communications.
How To Fix
Minimum fixed version
2.6-r2
This is the first release that contains the fix.
sudo apk add --upgrade hostapdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling the WPA/WPA2 protocols on your wireless network and switching to a more secure alternative, such as WPA3, if supported by your devices. This can help mitigate the risk until the affected packages are updated.
Conclusion
The CVE-2017-13077 vulnerability in Hostapd and Wpa_supplicant poses a significant risk to wireless network security. It is essential to update to the patched versions of these packages to protect against potential attacks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for hostapd →
FAQ
CVE-2017-13077 is a vulnerability in the WPA and WPA2 protocols that allows attackers to exploit the four-way handshake process, potentially leading to unauthorized access to sensitive data.
You can use Vulert, which monitors open-source vulnerabilities in your software by analyzing the manifest file like package-lock.json. Visit Vulert Scanner to check if your application is affected.
The consequences include unauthorized access to network communications, potential data breaches, and the ability for attackers to spoof or replay network frames.
Yes, patches are available. Ensure that Hostapd is updated to version 2.6-r2 and Wpa_supplicant to version 2.6-r7 or later.
If immediate updates are not possible, consider disabling WPA/WPA2 protocols and switching to WPA3 if your devices support it to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for hostapd.
