WPA/WPA2 Group Key Handshake Vulnerability in Hostapd and Wpa_supplicant
Summary
ALPINE-CVE-2017-13081: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames fr... Affects hostapd versions < 2.6-r2. Fixed in 2.6-r2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Hostapd and Wpa_supplicant are essential components in managing wireless networks, providing support for Wi-Fi Protected Access (WPA) and WPA2 protocols. These packages facilitate secure communication over wireless networks by implementing encryption and authentication mechanisms. However, they are susceptible to a critical vulnerability that allows an attacker to exploit the group key handshake process, potentially compromising network security.
Vulnerability Detail
The vulnerability, identified as CVE-2017-13081, arises from the Wi-Fi Protected Access (WPA and WPA2) implementation that supports IEEE 802.11w. It allows the reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake. This flaw enables an attacker within radio range to spoof frames from access points to clients, leading to unauthorized access and potential data interception. The vulnerability has a CVSS score of 5.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
2.6-r2
This is the first release that contains the fix.
sudo apk add --upgrade hostapdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling the group key handshake feature if it is not essential for your network security. This can help mitigate the risk until the packages are updated. However, this may reduce the overall security of your wireless network.
Conclusion
The vulnerability CVE-2017-13081 poses a significant risk to wireless network security by allowing attackers to exploit the group key handshake process in Hostapd and Wpa_supplicant. It is essential to update these packages to their patched versions to mitigate the risk and ensure secure communications.
See every vulnerability recorded for hostapd →
FAQ
CVE-2017-13081 is a vulnerability in the WPA/WPA2 protocols that allows attackers to spoof frames during the group key handshake, potentially compromising network security.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability can allow attackers to intercept data and spoof network communications, leading to unauthorized access to sensitive information.
You can update Hostapd and Wpa_supplicant by running the commands 'apk upgrade hostapd=2.6-r2' and 'apk upgrade wpa_supplicant=2.6-r7' in your terminal.
Vulert is a service that monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json, ensuring real-time awareness of security issues.
References
Related vulnerabilities
Recent vulnerabilities recorded for hostapd.
