Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-13072 State: PUBLISHED Published: 2018-06-21T13:00:00Z Last Updated: 2024-09-16T16:18:40.800Z Vendors: QNAP Products: App Center in QTS Problem Types: Cross-site scripting Description: Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/nas-201805-16
CVE ID: CVE-2017-13073 State: PUBLISHED Published: 2018-04-23T14:00:00Z Last Updated: 2024-09-16T19:14:43.110Z Vendors: QNAP Products: Photo Station Problem Types: Cross-site scripting Description: Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201804-23
CVE ID: CVE-2017-13077 State: PUBLISHED Published: 2017-10-17T02:00:00 Last Updated: 2024-08-05T18:58:12.291Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: n/a Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - https://support.apple.com/HT208221 - http://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redhat.com/security/vulnerabilities/kracks - http://www.securitytracker.com/id/1041432 - https://source.android.com/security/bulletin/2018-04-01 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://access.redhat.com/errata/RHSA-2017:2911 - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/
played-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us - https://support.apple.com/HT208222 - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1039573
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1039573 - http://www.securitytracker.com/id/1039576 - https://cert.vde.com/en-us/advisories/vde-2017-003 - http://www.securitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://support.apple.com/HT208220 - https://source.android.com/security/bulletin/2018-06-01 - https://support.apple.com/HT208219 - https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2017-13078 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.469Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - https://support.apple.com/HT208221 - http://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http:
//www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://access.redhat.com/errata/RHSA-2017:2911 - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe
.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html - https://support.apple.com/HT208222 - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htm
:07.wpa.asc - https://www.krackattacks.com/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1039573 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html - http://www.securitytracker.com/id/1039576 - https://cert.vde.com/en-us/advisories/vde-2017-003 - http://www.securitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://support.apple.com/HT208220 - https://support.apple.com/HT208219 - https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ub
t-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2017-13079 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.231Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - http://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http:
//www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId
.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.securitytracker.com/id/1039573 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html - http://www.securitytracker.com/id/1039576 - http://www.securitytracker.com/id/1039585 - ht
ounce/2017-10/msg00023.html - http://www.securitytracker.com/id/1039576 - http://www.securitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2017-13080 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.283Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - https://support.apple.com/HT208221 - http://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http
://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - http://www.debian.org/security/2017/dsa-3999 - https://support.apple.com/HT208327 - http://www.securitytracker.com/id/1039578 - https://support.apple.com/HT208325 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://access.redhat.com/errata/RHSA-2017:2911 - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-m
https://access.redhat.com/errata/RHSA-2017:2911 - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - http://www.securitytracker.com/id/1039572 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html - https://support.apple.com/HT208222 - https://support.apple.com/HT208334 - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - https://su
n/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1039573 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html - http://www.securitytracker.com/id/1039576 - https://cert.vde.com/en-us/advisories/vde-2017-003 - http://www.securitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://support.apple.com/HT208220 - https://supp
curitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://support.apple.com/HT208220 - https://support.apple.com/HT208219 - https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.securitytracker.com/id/1039703 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080 - http://www.ubuntu.com/usn/USN-3455-1 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.html
CVE ID: CVE-2017-13081 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.441Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - http://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http
://www.securityfocus.com/bid/101274 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docI
7.txt - http://www.securitytracker.com/id/1039577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.securitytracker.com/id/1039573 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html - http://www.securitytracker.com/id/1039576 - http://www.securitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://lists.debian.or
id/1039576 - http://www.securitytracker.com/id/1039585 - http://www.kb.cert.org/vuls/id/228519 - https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2017-13082 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.560Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - http://www.securityfocus.com/bid/101274 - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/
/id/1039581 - http://www.securityfocus.com/bid/101274 - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.debian.org/security/2017/dsa-3999 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039571 - https://ics-cert.us-cert.gov/advisories/ICSA-17-299-02 - https://source.android.com/security/bull
acker.com/id/1039571 - https://ics-cert.us-cert.gov/advisories/ICSA-17-299-02 - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - http://www.securitytracker.com/id/1039570 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1039573 - http://www.kb.cert.org/vuls/id/228519 - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://github.com/vanhoefm/krackat
rg/vuls/id/228519 - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://github.com/vanhoefm/krackattacks-test-ap-ft - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2017-13083 State: PUBLISHED Published: 2017-10-18T13:00:00 Last Updated: 2024-08-05T18:58:12.360Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Akeo Consulting Products: Rufus Problem Types: CWE-295, CWE-494, CWE-345, CWE-347 Description: Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/403768 - https://github.com/pbatard/rufus/issues/1009 - http://www.securityfocus.com/bid/100516 - https://github.com/pb
/403768 - https://github.com/pbatard/rufus/issues/1009 - http://www.securityfocus.com/bid/100516 - https://github.com/pbatard/rufus/commit/c3c39f7f8a11f612c4ebf7affce25ec6928eb1cb
CVE ID: CVE-2017-13084 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.325Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - http://www.securityfocus.com/bid/101274 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/conten
/bid/101274 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://security.gentoo.org/glsa/201711-03 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://www.krackattacks.com/ - http://www.securitytracker.com/id/1039576 - http://www.kb.cert.org/vuls/id/228519 - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
CVE ID: CVE-2017-13086 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.219Z Vendors: Wi-Fi Alliance Products: Wi-Fi Protected Access (WPA and WPA2) Problem Types: CWE-323 Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - http://www.securityfocus.com/bid/101274 - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redha
101274 - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisori
ata/RHSA-2017:2907 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.securitytracker.com/id/1039573 - http://www.securitytracker.com/id/1039576 - http://www.kb.cert.org/vuls/id/228519 - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2017-13087 State: PUBLISHED Published: 2017-10-17T13:00:00 Last Updated: 2024-08-05T18:58:12.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039581 - http://www.securityfocus.com/bid/101274 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html - http://www.debian.org/s
us.com/bid/101274 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html - http://www.debian.org/security/2017/dsa-3999 - http://www.securitytracker.com/id/1039578 - https://access.redhat.com/security/vulnerabilities/kracks - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa - https://access.redhat.com/errata/RHSA-2017:2911 - https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt - http://www.securitytracker.com/id/1039577 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html - https://source.android.com/security/b
577 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html - https://source.android.com/security/bulletin/2017-11-01 - https://security.gentoo.org/glsa/201711-03 - https://access.redhat.com/errata/RHSA-2017:2907 - https://support.lenovo.com/us/en/product_security/LEN-17420 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc - https://www.krackattacks.com/ - http://www.securitytracker.com/id/1039573 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html - http://www.securitytracker.com/id/1039576 - http://www.kb.cert.org/vuls/id/228519 - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/adviso
.org/vuls/id/228519 - https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf - https://cert.vde.com/en-us/advisories/vde-2017-005 - http://www.ubuntu.com/usn/USN-3455-1