	Vendor	Product	Version
	Wi-Fi Alliance	Wi-Fi Protected Access (WPA and WPA2)	Affected: WPA Affected: WPA2

VDE-2019-005

Vulnerability from csaf_endresshauserag - Published: 2019-03-19 15:34 - Updated: 2019-03-19 15:34

Summary

Endress+Hauser: WIFI enabled products utilising WPA2

Notes

Summary: Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. The Field Xpert SFX370 and SFX350 handhelds are manufactured by Pepperl+Fuchs/ecom instruments for Endress+Hauser. The Advisory for Pepperl+Fuchs/ecom instruments can be found here: VDE-2017-005

Impact: The devices are in theory attackable by replay, decryption and faking of packets. However, to perform the attack, the attacker must be significantly closer to the ecom device than to the access point. The WPA2 password cannot be compromised using a KRACK attack. Note if WPA-TKIP is used instead of AES-CCMP, an attacker can easily fake and inject packets directly into the WIFI.

Remediation: For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13077

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13078

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13081

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13082

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13086

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13087

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

CVE-2017-13088

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

References

URL

Category

	https://certvde.com/en/advisories/VDE-2019-005/	self
	https://endress-hauser.csaf-tp.certvde.com/.well-…	self
	https://www.endress.com	external
	https://certvde.com/en/advisories/vendor/endress-…	external

Acknowledgments

CERT@VDE certvde.com

krack attacks KU Leuven www.krackattacks.com/

imec-DistriNet Mathy Vanhoef

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "KU Leuven"
        ],
        "organization": "krack attacks",
        "summary": "reporting",
        "urls": [
          "https://www.krackattacks.com/"
        ]
      },
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet ",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection.\nThe Field Xpert SFX370 and SFX350 handhelds are manufactured by Pepperl+Fuchs/ecom instruments for Endress+Hauser.\nThe Advisory for Pepperl+Fuchs/ecom instruments can be found here: VDE-2017-005",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "The devices are in theory attackable by replay, decryption and faking of packets. However, to perform the attack, the attacker must be significantly closer to the ecom device than to the access point. The WPA2 password cannot be compromised using a KRACK attack. Note if WPA-TKIP is used instead of AES-CCMP, an attacker can easily fake and inject packets directly into the WIFI.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@endress.com",
      "name": "Endress+Hauser AG",
      "namespace": "https://www.endress.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2019-005: Endress+Hauser: WIFI enabled products utilising WPA2 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2019-005/"
      },
      {
        "category": "self",
        "summary": "VDE-2019-005: Endress+Hauser: WIFI enabled products utilising WPA2 - CSAF",
        "url": "https://endress-hauser.csaf-tp.certvde.com/.well-known/csaf/white/2019/vde-2019-005.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://www.endress.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Endress+Hauser AG",
        "url": "https://certvde.com/en/advisories/vendor/endress-hauser/"
      }
    ],
    "title": "Endress+Hauser: WIFI enabled products utilising WPA2",
    "tracking": {
      "aliases": [
        "VDE-2019-005"
      ],
      "current_release_date": "2019-03-19T15:34:00.000Z",
      "generator": {
        "date": "2025-05-26T13:13:31.733Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.26"
        }
      },
      "id": "VDE-2019-005",
      "initial_release_date": "2019-03-19T15:34:00.000Z",
      "revision_history": [
        {
          "date": "2019-03-19T15:34:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Field Xpert SFX350 vers:all/*",
                      "product_id": "CSAFPID-11001"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Field Xpert SFX350"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Field Xpert SFX370 vers:all/*",
                      "product_id": "CSAFPID-11002"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Field Xpert SFX370"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Field Xpert SMT70 vers:all/*",
                      "product_id": "CSAFPID-11003"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Field Xpert SMT70"
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          }
        ],
        "category": "vendor",
        "name": "Vendor"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ],
        "summary": "Affected products."
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13080",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13079",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13081",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft.\n\nIntermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB\n\nTo obtain this patch, please contact your local Endress+Hauser representative.\nIf you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately.\nFor Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version.\nAs a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment.\n\nNote: This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003"
          ]
        }
      ],
      "title": "CVE-2017-13088"
    }
  ]
}

CERTFR-2017-ALE-014

Vulnerability from certfr_alerte - Published: 2017-10-18 - Updated: 2017-10-19

Plusieurs vulnérabilités ont été découvertes dans WPA/WPA2. Il est possible lors de l'établissement d'une session de communication utilisant le protocole WPA/WPA2 d'interférer sur le mécanisme en quatre temps visant à assurer la confidentialité des échanges. Lors de cette phase d'initialisation, un utilisateur malveillant interceptant les communications entre un client et un point d'accès Wi-fi, peut amener le client à réutiliser des paramètres entrant en compte dans le chiffrement des données échangées. Cela peut permettre à un attaquant de provoquer une atteinte à la confidentialité ou à l'intégrité des données.

Par ailleurs, l'implémentation du protocole dans les logiciels wpa_supplicant rend l'exploitation de la vulnérabilité particulièrement aisée. Dans ces conditions il est notamment possible de rejouer des paquets réseau, d'injecter du contenu vers un client connecté en Wi-Fi et d'accéder à des communications confidentielles.

Si tous les clients utilisants WPA/WPA2 sont vulnérables à cette attaque, les objets connectés, les appareils sous Linux et Android sont particulièrement sensibles de par l'utilisation native de wpa_supplicant.

On notera qu'afin de pouvoir réaliser ces attaques sur WPA/WPA2 un attaquant doit nécessairement être à proximité du réseau Wi-Fi cible. De plus, il est à noter que ces attaques ne compromettent pas la clé Wi-Fi et qu'une modification de cette clé ne permet pas de se prémunir de l'attaque.

Des informations complémentaires seront ajoutées à la présente page.

Solution

Le CERT-FR recommande plusieurs mesures afin de limiter l'impact de cette vulnérabilité :

mettre à jour régulièrement tout système se connectant au réseau Wi-Fi (Systèmes industriels, objets connectés, ordiphones, postes clients, répéteurs Wi-Fi), en s'appuyant sur la liste des systèmes affectés ci-dessous ;
https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=2285
privilégier les protections de type TLS ou VPN pour assurer l'intégrité et la confidentialité des données échangées sur les réseaux Wi-Fi ;
configurer les équipements Wi-Fi pour imposer l'utilisation de WPA2 (et non pas WPA) et AES-CCMP (et non pas TKIP) ; cette recommandation ne permet pas de se prémunir contre une potentielle écoute d'une communication mais empêche le vol de la clé de session Wi-Fi ;
désactiver ou filtrer le trafic multicast ; ce type de trafic rendant les systèmes Microsoft et Apple vulnérables ;
faire un inventaire et une analyse de risque des systèmes utilisant un réseau Wi-Fi, notamment des systèmes cités plus haut, afin de désactiver si possible le service Wi-Fi.

Le CERT-FR, dans le cadre de cette alerte, rappelle les bonnes pratiques suivantes :

assurer une veille des publication des correctifs de sécurité des composants cités supra ;
sensibiliser les utilisateurs, notamment ceux particulièrement ciblés et manipulant des informations sensibles, aux risques liés à l'utilisation du réseau Wi-Fi (public ou non)

La vulnérabilité affectant le protocole de sécurisation des échanges utilisant le mécanisme Wi-Fi Protected Access (WPA), de nombreux systèmes sont impactés. Une liste exhaustive est disponible dans la section documentation de cette alerte.

La vulnérabilité touche entre autres les systèmes suivants :

Windows
Linux
Android
Apple

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Page internet décrivant l'attaque sur le protocole WPA/WPA2	None	vendor-advisory
Avis CERT-FR CERTFR-2017-AVI-357 Vulnérabilité dans Microsoft Windows sur le protocole WPA/WPA2	-	other
Avis CERT-FR CERTFR-2017-AVI-373 Multiples vulnérabilités dans RedHat wpa_supplicant	-	other
Liste des systèmes affectées par la vulnérabilité WPA2	-	other
Guide de l'ANSSI "sécuriser les accès WI-FI"	-	other
Avis CERT-FR CERTFR-2017-AVI-360 Multiples vulnérabilités dans les produits Fortinet utilisant le protocole WPA/WPA2	-	other
Avis CERT-FR CERTFR-2017-AVI-361 Multiples vulnérabilités dans les produits Juniper utilisant le protocole WPA/WPA2	-	other
Avis CERT-FR CERTFR-2017-AVI-358 Multiples vulnérabilités dans Debian sur le protocole WPA/WPA2	-	other
Avis CERT-FR CERTFR-2017-AVI-359 Multiples vulnérabilités dans Ubuntu wpa_supplicant et hostpad	-	other
Avis CERT-FR CERTFR-2017-AVI-363 Multiples vulnérabilités dans SUSE wpa_supplicant	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLa vuln\u00e9rabilit\u00e9 affectant le protocole de s\u00e9curisation des \u00e9changes utilisant le m\u00e9canisme \u003cem\u003eWi-Fi Protected Access\u003c/em\u003e (WPA), de nombreux syst\u00e8mes sont impact\u00e9s. Une liste exhaustive est disponible dans la section documentation de cette alerte.\u003c/p\u003e \u003cp\u003eLa vuln\u00e9rabilit\u00e9 touche entre autres les syst\u00e8mes suivants :\u003c/p\u003e \u003cul\u003e \u003cli\u003eWindows\u003c/li\u003e \u003cli\u003eLinux\u003c/li\u003e \u003cli\u003eAndroid\u003c/li\u003e \u003cli\u003eApple\u003c/li\u003e \u003c/ul\u003e ",
  "closed_at": "2017-11-27",
  "content": "## Solution\n\nLe CERT-FR recommande plusieurs mesures afin de limiter l\u0027impact de\ncette vuln\u00e9rabilit\u00e9 :\n\n-   mettre \u00e0 jour r\u00e9guli\u00e8rement tout syst\u00e8me se connectant au r\u00e9seau\n    Wi-Fi (Syst\u00e8mes industriels, objets connect\u00e9s, ordiphones, postes\n    clients, r\u00e9p\u00e9teurs Wi-Fi), en s\u0027appuyant sur la liste des syst\u00e8mes\n    affect\u00e9s ci-dessous ;  \n    [https://www.kb.cert.org/vuls/byvendor?searchview\u0026Query=FIELD+Reference=2285](https://www.kb.cert.org/vuls/byvendor?searchview\u0026Query=FIELD+Reference=228519\u0026SearchOrder=4)\n-   privil\u00e9gier les protections de type TLS ou VPN pour assurer\n    l\u0027int\u00e9grit\u00e9 et la confidentialit\u00e9 des donn\u00e9es \u00e9chang\u00e9es sur les\n    r\u00e9seaux Wi-Fi ;\n-   configurer les \u00e9quipements Wi-Fi pour imposer l\u0027utilisation de WPA2\n    (et non pas WPA) et AES-CCMP (et non pas TKIP) ; cette\n    recommandation ne permet pas de se pr\u00e9munir contre une potentielle\n    \u00e9coute d\u0027une communication mais emp\u00eache le vol de la cl\u00e9 de session\n    Wi-Fi ;\n-   d\u00e9sactiver ou filtrer le trafic *multicast* ; ce type de trafic\n    rendant les syst\u00e8mes *Microsoft* et *Apple* vuln\u00e9rables ;\n-   faire un inventaire et une analyse de risque des syst\u00e8mes utilisant\n    un r\u00e9seau Wi-Fi, notamment des syst\u00e8mes cit\u00e9s plus haut, afin de\n    d\u00e9sactiver si possible le service Wi-Fi.\n\nLe CERT-FR, dans le cadre de cette alerte, rappelle les bonnes pratiques\nsuivantes :\n\n-   assurer une veille des publication des correctifs de s\u00e9curit\u00e9 des\n    composants cit\u00e9s *supra* ;\n-   sensibiliser les utilisateurs, notamment ceux particuli\u00e8rement\n    cibl\u00e9s et manipulant des informations sensibles, aux risques li\u00e9s \u00e0\n    l\u0027utilisation du r\u00e9seau Wi-Fi (public ou non)\n",
  "cves": [
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-13084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13084"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    }
  ],
  "initial_release_date": "2017-10-18T00:00:00",
  "last_revision_date": "2017-10-19T00:00:00",
  "links": [
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-357 Vuln\u00e9rabilit\u00e9 dans Microsoft Windows sur le protocole WPA/WPA2",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-357"
    },
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-373 Multiples vuln\u00e9rabilit\u00e9s dans RedHat wpa_supplicant",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-373"
    },
    {
      "title": "Liste des syst\u00e8mes affect\u00e9es par la vuln\u00e9rabilit\u00e9 WPA2",
      "url": "https://www.kb.cert.org/vuls/byvendor?searchview\u0026Query=FIELD+Reference=228519\u0026SearchOrder=4"
    },
    {
      "title": "Guide de l\u0027ANSSI \"s\u00e9curiser les acc\u00e8s WI-FI\"",
      "url": "https://www.ssi.gouv.fr/particulier/guide/recommandations-de-securite-relatives-aux-reseaux-wifi/"
    },
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-360 Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet utilisant le protocole WPA/WPA2",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-360"
    },
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-361 Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper utilisant le protocole WPA/WPA2",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-361"
    },
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-358 Multiples vuln\u00e9rabilit\u00e9s dans Debian sur le protocole WPA/WPA2",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-358"
    },
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-359 Multiples vuln\u00e9rabilit\u00e9s dans Ubuntu wpa_supplicant et hostpad",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-359"
    },
    {
      "title": "Avis CERT-FR CERTFR-2017-AVI-363 Multiples vuln\u00e9rabilit\u00e9s dans SUSE wpa_supplicant",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-363"
    }
  ],
  "reference": "CERTFR-2017-ALE-014",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-18T00:00:00.000000"
    },
    {
      "description": "Ajout de bulletins relatifs \u00e0 la vuln\u00e9rabilit\u00e9 WPA/WPA2",
      "revision_date": "2017-10-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans WPA/WPA2. Il est\npossible lors de l\u0027\u00e9tablissement d\u0027une session de communication\nutilisant le protocole WPA/WPA2 d\u0027interf\u00e9rer sur le m\u00e9canisme en quatre\ntemps visant \u00e0 assurer la confidentialit\u00e9 des \u00e9changes. Lors de cette\nphase d\u0027initialisation, un utilisateur malveillant interceptant les\ncommunications entre un client et un point d\u0027acc\u00e8s Wi-fi, peut amener le\nclient \u00e0 r\u00e9utiliser des param\u00e8tres entrant en compte dans le chiffrement\ndes donn\u00e9es \u00e9chang\u00e9es. Cela peut permettre \u00e0 un attaquant de provoquer\nune atteinte \u00e0 la confidentialit\u00e9 ou \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n\nPar ailleurs, l\u0027impl\u00e9mentation du protocole dans les logiciels\nwpa_supplicant rend l\u0027exploitation de la vuln\u00e9rabilit\u00e9 particuli\u00e8rement\nais\u00e9e. Dans ces conditions il est notamment possible de rejouer des\npaquets r\u00e9seau, d\u0027injecter du contenu vers un client connect\u00e9 en Wi-Fi\net d\u0027acc\u00e9der \u00e0 des communications confidentielles.\n\nSi tous les clients utilisants WPA/WPA2 sont vuln\u00e9rables \u00e0 cette\nattaque, les objets connect\u00e9s, les appareils sous Linux et Android sont\nparticuli\u00e8rement sensibles de par l\u0027utilisation native de\nwpa_supplicant.\n\nOn notera qu\u0027afin de pouvoir r\u00e9aliser ces attaques sur WPA/WPA2 un\nattaquant doit n\u00e9cessairement \u00eatre \u00e0 proximit\u00e9 du r\u00e9seau Wi-Fi cible. De\nplus, il est \u00e0 noter que ces attaques ne compromettent pas la cl\u00e9 Wi-Fi\net qu\u0027une modification de cette cl\u00e9 ne permet pas de se pr\u00e9munir de\nl\u0027attaque.\n\nDes informations compl\u00e9mentaires seront ajout\u00e9es \u00e0 la pr\u00e9sente page.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le protocole WPA/WPA2",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Page internet d\u00e9crivant l\u0027attaque sur le protocole WPA/WPA2",
      "url": "https://www.krackattacks.com/"
    }
  ]
}

GHSA-QVR8-F9G3-WV5X

Vulnerability from github – Published: 2022-05-13 01:43 – Updated: 2025-04-20 03:46

Details

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

Severity ?

5.3 (Medium)


                  
                    CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-13088"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-323",
      "CWE-330"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-10-17T13:29:00Z",
    "severity": "MODERATE"
  },
  "details": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
  "id": "GHSA-qvr8-f9g3-wv5x",
  "modified": "2025-04-20T03:46:56Z",
  "published": "2022-05-13T01:43:02Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2907"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/vulnerabilities/kracks"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf"
    },
    {
      "type": "WEB",
      "url": "https://cert.vde.com/en-us/advisories/vde-2017-005"
    },
    {
      "type": "WEB",
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201711-03"
    },
    {
      "type": "WEB",
      "url": "https://source.android.com/security/bulletin/2017-11-01"
    },
    {
      "type": "WEB",
      "url": "https://support.lenovo.com/us/en/product_security/LEN-17420"
    },
    {
      "type": "WEB",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
    },
    {
      "type": "WEB",
      "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
    },
    {
      "type": "WEB",
      "url": "https://www.krackattacks.com"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
    },
    {
      "type": "WEB",
      "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2017/dsa-3999"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/228519"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/101274"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039573"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039576"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039577"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039578"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039581"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-3455-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

CERTFR-2017-AVI-358

Vulnerability from certfr_avis - Published: 2017-10-17 - Updated: 2017-10-17

De multiples vulnérabilités ont été découvertes dans Debian sur le protocole WPA/WPA2. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Debian	N/A	Stretch version antérieures à 2:2.4-1+deb9u1
Debian	N/A	Jessie version antérieures à 2.3-1+deb8u5
Debian	N/A	Sid versions antérieures à 2:2.4-1.1
Debian	N/A	Buster versions antérieures à 2:2.4-1.1

References

Title

Publication Time

Tags

Bulletin de sécurité Debian DSA-3999-1 du 16 octobre 2017

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Stretch version ant\u00e9rieures \u00e0 2:2.4-1+deb9u1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Jessie version ant\u00e9rieures \u00e0 2.3-1+deb8u5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Sid versions ant\u00e9rieures \u00e0 2:2.4-1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Buster versions ant\u00e9rieures \u00e0 2:2.4-1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    }
  ],
  "initial_release_date": "2017-10-17T00:00:00",
  "last_revision_date": "2017-10-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2017-AVI-358",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Debian sur le\nprotocole WPA/WPA2. Elles permettent \u00e0 un attaquant de provoquer une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Debian sur le protocole WPA/WPA2",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-3999-1 du 16 octobre 2017",
      "url": "https://www.debian.org/security/2017/dsa-3999"
    }
  ]
}

CERTFR-2017-AVI-363

Vulnerability from certfr_avis - Published: 2017-10-18 - Updated: 2017-10-18

De multiples vulnérabilités ont été découvertes dans SUSE wpa_supplicant. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 11-SP3-LTSS
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 12-SP2
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server pour SAP 12-SP1
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 12-LTSS
SUSE	SUSE Linux Enterprise Desktop	SUSE Linux Enterprise Desktop 12-SP3
SUSE	N/A	SUSE Linux Enterprise Point of Sale 11-SP3
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 11-SP4
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server pour Raspberry Pi 12-SP2
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 12-SP1-LTSS
SUSE	N/A	SUSE OpenStack Cloud 6
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 12-SP3
SUSE	SUSE Linux Enterprise Desktop	SUSE Linux Enterprise Desktop 12-SP2

References

Title

Publication Time

Tags

Bulletin de sécurité SUSE SUSE-SU-2017:2745-1 du 17 octobre 2017	None	vendor-advisory
Bulletin de sécurité SUSE SUSE-SU-2017:2752-1 du 17 octobre 2017	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SUSE Linux Enterprise Server 11-SP3-LTSS",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 12-SP2",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server pour SAP 12-SP1",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 12-LTSS",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Desktop 12-SP3",
      "product": {
        "name": "SUSE Linux Enterprise Desktop",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Point of Sale 11-SP3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 11-SP4",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server pour Raspberry Pi 12-SP2",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 12-SP1-LTSS",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE OpenStack Cloud 6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 12-SP3",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Desktop 12-SP2",
      "product": {
        "name": "SUSE Linux Enterprise Desktop",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    }
  ],
  "initial_release_date": "2017-10-18T00:00:00",
  "last_revision_date": "2017-10-18T00:00:00",
  "links": [],
  "reference": "CERTFR-2017-AVI-363",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans SUSE\nwpa_supplicant. Elles permettent \u00e0 un attaquant de provoquer une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans SUSE wpa_supplicant",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:2745-1 du 17 octobre 2017",
      "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172745-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2017:2752-1 du 17 octobre 2017",
      "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172752-1/"
    }
  ]
}

CERTFR-2017-AVI-398

Vulnerability from certfr_avis - Published: 2017-11-08 - Updated: 2017-11-08

De multiples vulnérabilités ont été découvertes dans NVIDIA Shield Tablet. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Google	Android	Shield Tablet pour Android versions antérieures à SE 5.3

References

Title

Publication Time

Tags

Bulletin de sécurité NVIDIA 4569 du 8 novembre 2017

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Shield Tablet pour Android versions ant\u00e9rieures \u00e0 SE 5.3",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-0331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0331"
    },
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-0785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0785"
    },
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-6247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6247"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-0340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0340"
    },
    {
      "name": "CVE-2017-6249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6249"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-6258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6258"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-0782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0782"
    },
    {
      "name": "CVE-2017-0781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0781"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-6248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6248"
    },
    {
      "name": "CVE-2017-0783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0783"
    },
    {
      "name": "CVE-2017-0744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0744"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    }
  ],
  "initial_release_date": "2017-11-08T00:00:00",
  "last_revision_date": "2017-11-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2017-AVI-398",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-11-08T00:00:00.000000"
    },
    {
      "description": "Version initiale",
      "revision_date": "2017-11-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans NVIDIA Shield\nTablet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nun d\u00e9ni de service, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans NVIDIA Shield Tablet",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NVIDIA 4569 du 8 novembre 2017",
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4569"
    }
  ]
}

CERTFR-2017-AVI-361

Vulnerability from certfr_avis - Published: 2017-10-17 - Updated: 2017-10-17

De multiples vulnérabilités ont été découvertes dans les produits Juniper utilisant le protocole WPA/WPA2 . Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Juniper Networks	Junos OS	Junos OS 12.1X46
Juniper Networks	N/A	ScreenOS 6.3
Juniper Networks	N/A	WLAN versions 9.2 et 9.6

References

Title

Publication Time

Tags

Bulletin de sécurité Juniper JSA10827 du 16 octobre 2017

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Junos OS 12.1X46",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "ScreenOS 6.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WLAN versions 9.2 et 9.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-13084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13084"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    }
  ],
  "initial_release_date": "2017-10-17T00:00:00",
  "last_revision_date": "2017-10-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2017-AVI-361",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper utilisant le protocole WPA/WPA2 . Elles permettent \u00e0 un\nattaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper utilisant le protocole WPA/WPA2",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10827 du 16 octobre 2017",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10827\u0026cat=SIRT_1\u0026actp=LIST"
    }
  ]
}

CERTFR-2022-AVI-267

Vulnerability from certfr_avis - Published: 2022-03-23 - Updated: 2022-03-23

De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Juniper Networks	Junos Space	Juniper Networks Junos Space versions antérieures à 21.1R1

References

Title

Publication Time

Tags

Bulletin de sécurité Juniper JSA11176 du 22 mars 2022

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Juniper Networks Junos Space versions ant\u00e9rieures \u00e0 21.1R1",
      "product": {
        "name": "Junos Space",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-5715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5715"
    },
    {
      "name": "CVE-2018-3639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3639"
    },
    {
      "name": "CVE-2007-1351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1351"
    },
    {
      "name": "CVE-2007-1352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1352"
    },
    {
      "name": "CVE-2007-6284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6284"
    },
    {
      "name": "CVE-2008-2935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2935"
    },
    {
      "name": "CVE-2008-3281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-3281"
    },
    {
      "name": "CVE-2008-3529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-3529"
    },
    {
      "name": "CVE-2008-4226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4226"
    },
    {
      "name": "CVE-2008-4225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4225"
    },
    {
      "name": "CVE-2009-2414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-2414"
    },
    {
      "name": "CVE-2009-2416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-2416"
    },
    {
      "name": "CVE-2008-5161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-5161"
    },
    {
      "name": "CVE-2010-4008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4008"
    },
    {
      "name": "CVE-2011-0411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0411"
    },
    {
      "name": "CVE-2011-1720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1720"
    },
    {
      "name": "CVE-2011-0216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0216"
    },
    {
      "name": "CVE-2011-2834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2834"
    },
    {
      "name": "CVE-2011-2895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2895"
    },
    {
      "name": "CVE-2011-3905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3905"
    },
    {
      "name": "CVE-2011-3919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3919"
    },
    {
      "name": "CVE-2012-0841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0841"
    },
    {
      "name": "CVE-2011-1944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1944"
    },
    {
      "name": "CVE-2012-2807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2807"
    },
    {
      "name": "CVE-2012-2870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2870"
    },
    {
      "name": "CVE-2012-5134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5134"
    },
    {
      "name": "CVE-2011-3102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3102"
    },
    {
      "name": "CVE-2013-2877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2877"
    },
    {
      "name": "CVE-2013-0338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0338"
    },
    {
      "name": "CVE-2012-6139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6139"
    },
    {
      "name": "CVE-2013-2566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2566"
    },
    {
      "name": "CVE-2013-6462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6462"
    },
    {
      "name": "CVE-2014-0211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0211"
    },
    {
      "name": "CVE-2014-3660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3660"
    },
    {
      "name": "CVE-2015-1803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1803"
    },
    {
      "name": "CVE-2015-1804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1804"
    },
    {
      "name": "CVE-2015-1802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1802"
    },
    {
      "name": "CVE-2015-2716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2716"
    },
    {
      "name": "CVE-2015-5352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5352"
    },
    {
      "name": "CVE-2015-2808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2808"
    },
    {
      "name": "CVE-2014-8991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8991"
    },
    {
      "name": "CVE-2014-7185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7185"
    },
    {
      "name": "CVE-2014-9365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9365"
    },
    {
      "name": "CVE-2015-6838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-6838"
    },
    {
      "name": "CVE-2015-6837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-6837"
    },
    {
      "name": "CVE-2015-7995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7995"
    },
    {
      "name": "CVE-2015-8035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8035"
    },
    {
      "name": "CVE-2015-7499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7499"
    },
    {
      "name": "CVE-2015-8242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8242"
    },
    {
      "name": "CVE-2015-7500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7500"
    },
    {
      "name": "CVE-2016-1762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1762"
    },
    {
      "name": "CVE-2015-5312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5312"
    },
    {
      "name": "CVE-2016-1839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1839"
    },
    {
      "name": "CVE-2016-1833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1833"
    },
    {
      "name": "CVE-2016-1837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1837"
    },
    {
      "name": "CVE-2016-1834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1834"
    },
    {
      "name": "CVE-2016-1840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1840"
    },
    {
      "name": "CVE-2016-1836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1836"
    },
    {
      "name": "CVE-2016-1838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1838"
    },
    {
      "name": "CVE-2016-1684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1684"
    },
    {
      "name": "CVE-2016-1683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1683"
    },
    {
      "name": "CVE-2016-4448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4448"
    },
    {
      "name": "CVE-2016-4447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4447"
    },
    {
      "name": "CVE-2016-4449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4449"
    },
    {
      "name": "CVE-2016-5131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5131"
    },
    {
      "name": "CVE-2015-0975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0975"
    },
    {
      "name": "CVE-2016-4658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4658"
    },
    {
      "name": "CVE-2016-2183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2183"
    },
    {
      "name": "CVE-2016-3627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3627"
    },
    {
      "name": "CVE-2016-3115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3115"
    },
    {
      "name": "CVE-2016-5636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5636"
    },
    {
      "name": "CVE-2017-7375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7375"
    },
    {
      "name": "CVE-2017-7376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7376"
    },
    {
      "name": "CVE-2017-7773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7773"
    },
    {
      "name": "CVE-2017-7772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7772"
    },
    {
      "name": "CVE-2017-7778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7778"
    },
    {
      "name": "CVE-2017-7771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7771"
    },
    {
      "name": "CVE-2017-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7774"
    },
    {
      "name": "CVE-2017-7776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7776"
    },
    {
      "name": "CVE-2017-7777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7777"
    },
    {
      "name": "CVE-2017-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7775"
    },
    {
      "name": "CVE-2017-6463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6463"
    },
    {
      "name": "CVE-2017-6462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6462"
    },
    {
      "name": "CVE-2017-6464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6464"
    },
    {
      "name": "CVE-2017-14492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14492"
    },
    {
      "name": "CVE-2017-14496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14496"
    },
    {
      "name": "CVE-2017-14491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
    },
    {
      "name": "CVE-2017-14493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14493"
    },
    {
      "name": "CVE-2017-14494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14494"
    },
    {
      "name": "CVE-2017-14495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14495"
    },
    {
      "name": "CVE-2017-5130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5130"
    },
    {
      "name": "CVE-2017-3736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
    },
    {
      "name": "CVE-2017-3735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3735"
    },
    {
      "name": "CVE-2017-15412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15412"
    },
    {
      "name": "CVE-2017-3738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3738"
    },
    {
      "name": "CVE-2017-3737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3737"
    },
    {
      "name": "CVE-2017-17807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17807"
    },
    {
      "name": "CVE-2018-0739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0739"
    },
    {
      "name": "CVE-2017-16931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-16931"
    },
    {
      "name": "CVE-2018-11214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11214"
    },
    {
      "name": "CVE-2015-9019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9019"
    },
    {
      "name": "CVE-2017-18258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-18258"
    },
    {
      "name": "CVE-2017-16932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-16932"
    },
    {
      "name": "CVE-2016-9318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9318"
    },
    {
      "name": "CVE-2018-1000120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000120"
    },
    {
      "name": "CVE-2018-1000007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000007"
    },
    {
      "name": "CVE-2018-1000121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000121"
    },
    {
      "name": "CVE-2018-1000122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000122"
    },
    {
      "name": "CVE-2018-0732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0732"
    },
    {
      "name": "CVE-2018-6914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6914"
    },
    {
      "name": "CVE-2017-0898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0898"
    },
    {
      "name": "CVE-2018-8778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-8778"
    },
    {
      "name": "CVE-2017-14033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14033"
    },
    {
      "name": "CVE-2018-8780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-8780"
    },
    {
      "name": "CVE-2017-17742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17742"
    },
    {
      "name": "CVE-2017-10784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10784"
    },
    {
      "name": "CVE-2017-17405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17405"
    },
    {
      "name": "CVE-2018-8779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-8779"
    },
    {
      "name": "CVE-2017-14064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14064"
    },
    {
      "name": "CVE-2018-8777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-8777"
    },
    {
      "name": "CVE-2018-16395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16395"
    },
    {
      "name": "CVE-2018-0737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
    },
    {
      "name": "CVE-2018-16396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16396"
    },
    {
      "name": "CVE-2018-0495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0495"
    },
    {
      "name": "CVE-2018-0734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
    },
    {
      "name": "CVE-2018-5407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
    },
    {
      "name": "CVE-2018-1126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1126"
    },
    {
      "name": "CVE-2018-7858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7858"
    },
    {
      "name": "CVE-2018-1124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1124"
    },
    {
      "name": "CVE-2018-10897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10897"
    },
    {
      "name": "CVE-2018-1064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1064"
    },
    {
      "name": "CVE-2018-5683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5683"
    },
    {
      "name": "CVE-2017-13672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13672"
    },
    {
      "name": "CVE-2018-11212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11212"
    },
    {
      "name": "CVE-2017-18267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-18267"
    },
    {
      "name": "CVE-2018-13988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-13988"
    },
    {
      "name": "CVE-2018-20169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20169"
    },
    {
      "name": "CVE-2018-19985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19985"
    },
    {
      "name": "CVE-2019-1559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1559"
    },
    {
      "name": "CVE-2019-6133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-6133"
    },
    {
      "name": "CVE-2018-18311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18311"
    },
    {
      "name": "CVE-2018-12127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12127"
    },
    {
      "name": "CVE-2018-12130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12130"
    },
    {
      "name": "CVE-2019-11091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11091"
    },
    {
      "name": "CVE-2018-12126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12126"
    },
    {
      "name": "CVE-2019-9503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9503"
    },
    {
      "name": "CVE-2019-10132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10132"
    },
    {
      "name": "CVE-2019-11190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11190"
    },
    {
      "name": "CVE-2019-11884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11884"
    },
    {
      "name": "CVE-2019-11487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11487"
    },
    {
      "name": "CVE-2019-12382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12382"
    },
    {
      "name": "CVE-2018-7191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7191"
    },
    {
      "name": "CVE-2019-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5953"
    },
    {
      "name": "CVE-2019-12614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12614"
    },
    {
      "name": "CVE-2019-11729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11729"
    },
    {
      "name": "CVE-2019-11727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11727"
    },
    {
      "name": "CVE-2019-11719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11719"
    },
    {
      "name": "CVE-2018-1060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1060"
    },
    {
      "name": "CVE-2018-12327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12327"
    },
    {
      "name": "CVE-2018-1061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1061"
    },
    {
      "name": "CVE-2019-10639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10639"
    },
    {
      "name": "CVE-2019-10638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10638"
    },
    {
      "name": "CVE-2018-20836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20836"
    },
    {
      "name": "CVE-2019-13233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13233"
    },
    {
      "name": "CVE-2019-14283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14283"
    },
    {
      "name": "CVE-2019-13648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13648"
    },
    {
      "name": "CVE-2019-10207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10207"
    },
    {
      "name": "CVE-2015-9289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9289"
    },
    {
      "name": "CVE-2019-14816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14816"
    },
    {
      "name": "CVE-2019-15239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15239"
    },
    {
      "name": "CVE-2019-15917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15917"
    },
    {
      "name": "CVE-2017-18551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-18551"
    },
    {
      "name": "CVE-2019-15217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15217"
    },
    {
      "name": "CVE-2019-14821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14821"
    },
    {
      "name": "CVE-2019-11068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11068"
    },
    {
      "name": "CVE-2018-18066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18066"
    },
    {
      "name": "CVE-2019-15903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
    },
    {
      "name": "CVE-2019-17666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17666"
    },
    {
      "name": "CVE-2019-17133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17133"
    },
    {
      "name": "CVE-2018-12207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12207"
    },
    {
      "name": "CVE-2019-11135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11135"
    },
    {
      "name": "CVE-2019-0154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0154"
    },
    {
      "name": "CVE-2019-17055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17055"
    },
    {
      "name": "CVE-2019-17053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17053"
    },
    {
      "name": "CVE-2019-16746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16746"
    },
    {
      "name": "CVE-2019-0155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0155"
    },
    {
      "name": "CVE-2019-16233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16233"
    },
    {
      "name": "CVE-2019-15807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15807"
    },
    {
      "name": "CVE-2019-16231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16231"
    },
    {
      "name": "CVE-2019-11756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756"
    },
    {
      "name": "CVE-2019-11745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11745"
    },
    {
      "name": "CVE-2019-19058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19058"
    },
    {
      "name": "CVE-2019-14895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14895"
    },
    {
      "name": "CVE-2019-19046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19046"
    },
    {
      "name": "CVE-2019-15916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15916"
    },
    {
      "name": "CVE-2019-18660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18660"
    },
    {
      "name": "CVE-2019-19063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19063"
    },
    {
      "name": "CVE-2019-19062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19062"
    },
    {
      "name": "CVE-2018-14526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14526"
    },
    {
      "name": "CVE-2019-13734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13734"
    },
    {
      "name": "CVE-2019-19530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19530"
    },
    {
      "name": "CVE-2019-19534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19534"
    },
    {
      "name": "CVE-2019-19524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19524"
    },
    {
      "name": "CVE-2019-14901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14901"
    },
    {
      "name": "CVE-2019-19537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19537"
    },
    {
      "name": "CVE-2019-19523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19523"
    },
    {
      "name": "CVE-2019-19338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19338"
    },
    {
      "name": "CVE-2019-19332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19332"
    },
    {
      "name": "CVE-2019-19527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19527"
    },
    {
      "name": "CVE-2019-18808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18808"
    },
    {
      "name": "CVE-2019-19767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19767"
    },
    {
      "name": "CVE-2019-19807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19807"
    },
    {
      "name": "CVE-2019-19055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19055"
    },
    {
      "name": "CVE-2019-17023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023"
    },
    {
      "name": "CVE-2019-9824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9824"
    },
    {
      "name": "CVE-2019-9636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9636"
    },
    {
      "name": "CVE-2019-12749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12749"
    },
    {
      "name": "CVE-2019-19447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19447"
    },
    {
      "name": "CVE-2019-20095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20095"
    },
    {
      "name": "CVE-2019-20054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20054"
    },
    {
      "name": "CVE-2019-18634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18634"
    },
    {
      "name": "CVE-2019-14898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14898"
    },
    {
      "name": "CVE-2019-16994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16994"
    },
    {
      "name": "CVE-2019-18282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18282"
    },
    {
      "name": "CVE-2020-2732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-2732"
    },
    {
      "name": "CVE-2019-19059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19059"
    },
    {
      "name": "CVE-2019-3901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3901"
    },
    {
      "name": "CVE-2020-9383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9383"
    },
    {
      "name": "CVE-2020-8647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8647"
    },
    {
      "name": "CVE-2020-8649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8649"
    },
    {
      "name": "CVE-2020-1749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1749"
    },
    {
      "name": "CVE-2019-9458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9458"
    },
    {
      "name": "CVE-2020-10942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10942"
    },
    {
      "name": "CVE-2019-9454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9454"
    },
    {
      "name": "CVE-2020-11565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11565"
    },
    {
      "name": "CVE-2020-10690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10690"
    },
    {
      "name": "CVE-2020-10751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10751"
    },
    {
      "name": "CVE-2020-12826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12826"
    },
    {
      "name": "CVE-2020-12654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12654"
    },
    {
      "name": "CVE-2020-10732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10732"
    },
    {
      "name": "CVE-2019-20636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20636"
    },
    {
      "name": "CVE-2019-20811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20811"
    },
    {
      "name": "CVE-2020-12653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12653"
    },
    {
      "name": "CVE-2020-10757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10757"
    },
    {
      "name": "CVE-2020-12770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12770"
    },
    {
      "name": "CVE-2020-12888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12888"
    },
    {
      "name": "CVE-2020-12402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12402"
    },
    {
      "name": "CVE-2018-16881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16881"
    },
    {
      "name": "CVE-2018-19519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19519"
    },
    {
      "name": "CVE-2020-10713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10713"
    },
    {
      "name": "CVE-2020-14311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14311"
    },
    {
      "name": "CVE-2020-14309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14309"
    },
    {
      "name": "CVE-2020-15706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15706"
    },
    {
      "name": "CVE-2020-14308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14308"
    },
    {
      "name": "CVE-2020-14310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14310"
    },
    {
      "name": "CVE-2020-15705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15705"
    },
    {
      "name": "CVE-2020-15707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15707"
    },
    {
      "name": "CVE-2020-14331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14331"
    },
    {
      "name": "CVE-2020-10769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10769"
    },
    {
      "name": "CVE-2020-14364",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14364"
    },
    {
      "name": "CVE-2020-12400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12400"
    },
    {
      "name": "CVE-2020-12401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12401"
    },
    {
      "name": "CVE-2020-6829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-6829"
    },
    {
      "name": "CVE-2020-14314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14314"
    },
    {
      "name": "CVE-2020-24394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-24394"
    },
    {
      "name": "CVE-2020-25212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25212"
    },
    {
      "name": "CVE-2020-14305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14305"
    },
    {
      "name": "CVE-2020-10742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10742"
    },
    {
      "name": "CVE-2020-14385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14385"
    },
    {
      "name": "CVE-2020-25643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25643"
    },
    {
      "name": "CVE-2020-15999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15999"
    },
    {
      "name": "CVE-2018-20843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20843"
    },
    {
      "name": "CVE-2018-5729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5729"
    },
    {
      "name": "CVE-2018-5730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5730"
    },
    {
      "name": "CVE-2020-13817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13817"
    },
    {
      "name": "CVE-2020-11868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11868"
    },
    {
      "name": "CVE-2021-3156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3156"
    },
    {
      "name": "CVE-2019-17006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006"
    },
    {
      "name": "CVE-2019-13232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13232"
    },
    {
      "name": "CVE-2020-10531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10531"
    },
    {
      "name": "CVE-2019-8696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8696"
    },
    {
      "name": "CVE-2019-20907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20907"
    },
    {
      "name": "CVE-2019-8675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8675"
    },
    {
      "name": "CVE-2017-12652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-12652"
    },
    {
      "name": "CVE-2019-12450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12450"
    },
    {
      "name": "CVE-2020-12825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12825"
    },
    {
      "name": "CVE-2020-12243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12243"
    },
    {
      "name": "CVE-2019-14866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14866"
    },
    {
      "name": "CVE-2020-1983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1983"
    },
    {
      "name": "CVE-2019-5188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5188"
    },
    {
      "name": "CVE-2019-5094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5094"
    },
    {
      "name": "CVE-2020-10754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10754"
    },
    {
      "name": "CVE-2020-12049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12049"
    },
    {
      "name": "CVE-2019-14822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14822"
    },
    {
      "name": "CVE-2020-14363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14363"
    },
    {
      "name": "CVE-2019-9924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9924"
    },
    {
      "name": "CVE-2018-18751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18751"
    },
    {
      "name": "CVE-2019-9948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9948"
    },
    {
      "name": "CVE-2019-20386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20386"
    },
    {
      "name": "CVE-2017-13722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13722"
    },
    {
      "name": "CVE-2014-0210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0210"
    },
    {
      "name": "CVE-2018-16403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16403"
    },
    {
      "name": "CVE-2018-15746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15746"
    },
    {
      "name": "CVE-2014-6272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6272"
    },
    {
      "name": "CVE-2019-7638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7638"
    },
    {
      "name": "CVE-2015-8241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8241"
    },
    {
      "name": "CVE-2019-10155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10155"
    },
    {
      "name": "CVE-2018-11813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11813"
    },
    {
      "name": "CVE-2018-18310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18310"
    },
    {
      "name": "CVE-2018-1084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1084"
    },
    {
      "name": "CVE-2020-12662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12662"
    },
    {
      "name": "CVE-2012-4423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4423"
    },
    {
      "name": "CVE-2017-0902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0902"
    },
    {
      "name": "CVE-2018-8945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-8945"
    },
    {
      "name": "CVE-2017-0899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0899"
    },
    {
      "name": "CVE-2010-2239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2239"
    },
    {
      "name": "CVE-2010-2242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2242"
    },
    {
      "name": "CVE-2017-14167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-14167"
    },
    {
      "name": "CVE-2015-0225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0225"
    },
    {
      "name": "CVE-2019-11324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11324"
    },
    {
      "name": "CVE-2013-6458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6458"
    },
    {
      "name": "CVE-2018-1000075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000075"
    },
    {
      "name": "CVE-2018-15857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15857"
    },
    {
      "name": "CVE-2018-16062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16062"
    },
    {
      "name": "CVE-2018-10534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10534"
    },
    {
      "name": "CVE-2014-0179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0179"
    },
    {
      "name": "CVE-2018-18384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18384"
    },
    {
      "name": "CVE-2013-1766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1766"
    },
    {
      "name": "CVE-2016-6580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-6580"
    },
    {
      "name": "CVE-2018-12697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12697"
    },
    {
      "name": "CVE-2018-1000301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000301"
    },
    {
      "name": "CVE-2019-11236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11236"
    },
    {
      "name": "CVE-2019-12155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12155"
    },
    {
      "name": "CVE-2017-0900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0900"
    },
    {
      "name": "CVE-2014-3598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3598"
    },
    {
      "name": "CVE-2017-1000050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000050"
    },
    {
      "name": "CVE-2018-10535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10535"
    },
    {
      "name": "CVE-2019-3820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3820"
    },
    {
      "name": "CVE-2018-16402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16402"
    },
    {
      "name": "CVE-2018-1116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1116"
    },
    {
      "name": "CVE-2018-15853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15853"
    },
    {
      "name": "CVE-2019-14378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14378"
    },
    {
      "name": "CVE-2016-1494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1494"
    },
    {
      "name": "CVE-2019-12312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12312"
    },
    {
      "name": "CVE-2013-0339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0339"
    },
    {
      "name": "CVE-2019-16935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16935"
    },
    {
      "name": "CVE-2015-6525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-6525"
    },
    {
      "name": "CVE-2016-6581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-6581"
    },
    {
      "name": "CVE-2013-4520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4520"
    },
    {
      "name": "CVE-2014-3633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3633"
    },
    {
      "name": "CVE-2014-3004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3004"
    },
    {
      "name": "CVE-2015-9381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9381"
    },
    {
      "name": "CVE-2016-5361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5361"
    },
    {
      "name": "CVE-2018-14598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14598"
    },
    {
      "name": "CVE-2014-1447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-1447"
    },
    {
      "name": "CVE-2018-20852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20852"
    },
    {
      "name": "CVE-2012-2693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2693"
    },
    {
      "name": "CVE-2018-7208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7208"
    },
    {
      "name": "CVE-2018-12910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12910"
    },
    {
      "name": "CVE-2019-8325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8325"
    },
    {
      "name": "CVE-2015-7497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7497"
    },
    {
      "name": "CVE-2019-7665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7665"
    },
    {
      "name": "CVE-2018-15854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15854"
    },
    {
      "name": "CVE-2019-13404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13404"
    },
    {
      "name": "CVE-2015-5160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5160"
    },
    {
      "name": "CVE-2018-10767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10767"
    },
    {
      "name": "CVE-2018-7550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7550"
    },
    {
      "name": "CVE-2016-3076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3076"
    },
    {
      "name": "CVE-2018-14404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14404"
    },
    {
      "name": "CVE-2018-18521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18521"
    },
    {
      "name": "CVE-2018-19788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19788"
    },
    {
      "name": "CVE-2019-8322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8322"
    },
    {
      "name": "CVE-2019-3840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3840"
    },
    {
      "name": "CVE-2016-9189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9189"
    },
    {
      "name": "CVE-2015-9262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9262"
    },
    {
      "name": "CVE-2018-14647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14647"
    },
    {
      "name": "CVE-2019-17041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17041"
    },
    {
      "name": "CVE-2019-14906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14906"
    },
    {
      "name": "CVE-2018-1000073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000073"
    },
    {
      "name": "CVE-2019-9947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9947"
    },
    {
      "name": "CVE-2017-1000158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000158"
    },
    {
      "name": "CVE-2019-7635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7635"
    },
    {
      "name": "CVE-2019-7576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7576"
    },
    {
      "name": "CVE-2019-14834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14834"
    },
    {
      "name": "CVE-2018-15855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15855"
    },
    {
      "name": "CVE-2019-7149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7149"
    },
    {
      "name": "CVE-2018-7642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7642"
    },
    {
      "name": "CVE-2019-5010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5010"
    },
    {
      "name": "CVE-2018-12641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12641"
    },
    {
      "name": "CVE-2021-3396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3396"
    },
    {
      "name": "CVE-2020-12403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12403"
    },
    {
      "name": "CVE-2017-15268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15268"
    },
    {
      "name": "CVE-2018-15587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15587"
    },
    {
      "name": "CVE-2016-10746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10746"
    },
    {
      "name": "CVE-2017-13711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13711"
    },
    {
      "name": "CVE-2014-8131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8131"
    },
    {
      "name": "CVE-2014-9601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9601"
    },
    {
      "name": "CVE-2014-3657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3657"
    },
    {
      "name": "CVE-2018-10373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10373"
    },
    {
      "name": "CVE-2017-17790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17790"
    },
    {
      "name": "CVE-2011-2511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2511"
    },
    {
      "name": "CVE-2018-1000802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000802"
    },
    {
      "name": "CVE-2017-7555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7555"
    },
    {
      "name": "CVE-2016-9015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9015"
    },
    {
      "name": "CVE-2017-13720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13720"
    },
    {
      "name": "CVE-2018-11782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11782"
    },
    {
      "name": "CVE-2017-11671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11671"
    },
    {
      "name": "CVE-2017-10664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10664"
    },
    {
      "name": "CVE-2018-11213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11213"
    },
    {
      "name": "CVE-2013-6457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6457"
    },
    {
      "name": "CVE-2019-10138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10138"
    },
    {
      "name": "CVE-2019-7578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7578"
    },
    {
      "name": "CVE-2020-7039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7039"
    },
    {
      "name": "CVE-2017-11368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11368"
    },
    {
      "name": "CVE-2018-0494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0494"
    },
    {
      "name": "CVE-2019-20485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20485"
    },
    {
      "name": "CVE-2003-1418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2003-1418"
    },
    {
      "name": "CVE-2017-15289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15289"
    },
    {
      "name": "CVE-2016-5391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5391"
    },
    {
      "name": "CVE-2017-2810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-2810"
    },
    {
      "name": "CVE-2018-15864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15864"
    },
    {
      "name": "CVE-2017-18207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-18207"
    },
    {
      "name": "CVE-2019-12761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12761"
    },
    {
      "name": "CVE-2013-5651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5651"
    },
    {
      "name": "CVE-2017-17522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17522"
    },
    {
      "name": "CVE-2019-20382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20382"
    },
    {
      "name": "CVE-2016-2533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2533"
    },
    {
      "name": "CVE-2019-14287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14287"
    },
    {
      "name": "CVE-2018-18520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18520"
    },
    {
      "name": "CVE-2019-9740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9740"
    },
    {
      "name": "CVE-2019-7575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7575"
    },
    {
      "name": "CVE-2015-5652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5652"
    },
    {
      "name": "CVE-2019-7572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7572"
    },
    {
      "name": "CVE-2017-6519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6519"
    },
    {
      "name": "CVE-2018-10906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10906"
    },
    {
      "name": "CVE-2018-15863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15863"
    },
    {
      "name": "CVE-2018-15862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15862"
    },
    {
      "name": "CVE-2018-1000079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000079"
    },
    {
      "name": "CVE-2019-7664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7664"
    },
    {
      "name": "CVE-2017-5992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5992"
    },
    {
      "name": "CVE-2019-16865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16865"
    },
    {
      "name": "CVE-2019-8324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8324"
    },
    {
      "name": "CVE-2018-1000076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000076"
    },
    {
      "name": "CVE-2018-1000030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000030"
    },
    {
      "name": "CVE-2018-1000074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000074"
    },
    {
      "name": "CVE-2017-0901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0901"
    },
    {
      "name": "CVE-2018-7568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7568"
    },
    {
      "name": "CVE-2016-0775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0775"
    },
    {
      "name": "CVE-2018-15688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15688"
    },
    {
      "name": "CVE-2018-14599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14599"
    },
    {
      "name": "CVE-2018-10733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10733"
    },
    {
      "name": "CVE-2016-9396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9396"
    },
    {
      "name": "CVE-2019-10160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10160"
    },
    {
      "name": "CVE-2017-7562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7562"
    },
    {
      "name": "CVE-2016-1000032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1000032"
    },
    {
      "name": "CVE-2017-15124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15124"
    },
    {
      "name": "CVE-2018-1113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1113"
    },
    {
      "name": "CVE-2013-4399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4399"
    },
    {
      "name": "CVE-2019-7636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7636"
    },
    {
      "name": "CVE-2014-3672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3672"
    },
    {
      "name": "CVE-2018-4700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-4700"
    },
    {
      "name": "CVE-2017-0903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0903"
    },
    {
      "name": "CVE-2018-15856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15856"
    },
    {
      "name": "CVE-2018-1000078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000078"
    },
    {
      "name": "CVE-2019-7573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7573"
    },
    {
      "name": "CVE-2018-1000077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000077"
    },
    {
      "name": "CVE-2010-2237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2237"
    },
    {
      "name": "CVE-2018-1000876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000876"
    },
    {
      "name": "CVE-2018-14348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14348"
    },
    {
      "name": "CVE-2019-3890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3890"
    },
    {
      "name": "CVE-2015-7498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7498"
    },
    {
      "name": "CVE-2019-7577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7577"
    },
    {
      "name": "CVE-2016-0740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0740"
    },
    {
      "name": "CVE-2018-4180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-4180"
    },
    {
      "name": "CVE-2013-4297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4297"
    },
    {
      "name": "CVE-2010-2238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2238"
    },
    {
      "name": "CVE-2018-14600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14600"
    },
    {
      "name": "CVE-2017-13090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13090"
    },
    {
      "name": "CVE-2013-7336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7336"
    },
    {
      "name": "CVE-2018-10372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10372"
    },
    {
      "name": "CVE-2019-7637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7637"
    },
    {
      "name": "CVE-2018-11806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11806"
    },
    {
      "name": "CVE-2018-7643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7643"
    },
    {
      "name": "CVE-2015-0236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0236"
    },
    {
      "name": "CVE-2018-1000117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000117"
    },
    {
      "name": "CVE-2014-0209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0209"
    },
    {
      "name": "CVE-2013-2230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2230"
    },
    {
      "name": "CVE-2018-1122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1122"
    },
    {
      "name": "CVE-2014-3960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3960"
    },
    {
      "name": "CVE-2019-16056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16056"
    },
    {
      "name": "CVE-2020-12663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12663"
    },
    {
      "name": "CVE-2018-10768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10768"
    },
    {
      "name": "CVE-2017-16611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-16611"
    },
    {
      "name": "CVE-2014-7823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7823"
    },
    {
      "name": "CVE-2020-10703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10703"
    },
    {
      "name": "CVE-2018-7569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7569"
    },
    {
      "name": "CVE-2013-4154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4154"
    },
    {
      "name": "CVE-2018-20060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20060"
    },
    {
      "name": "CVE-2015-9382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9382"
    },
    {
      "name": "CVE-2017-18190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-18190"
    },
    {
      "name": "CVE-2016-4009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4009"
    },
    {
      "name": "CVE-2018-13033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-13033"
    },
    {
      "name": "CVE-2016-9190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9190"
    },
    {
      "name": "CVE-2019-7574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7574"
    },
    {
      "name": "CVE-2016-0772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0772"
    },
    {
      "name": "CVE-2016-5699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5699"
    },
    {
      "name": "CVE-2011-1486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1486"
    },
    {
      "name": "CVE-2020-5208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5208"
    },
    {
      "name": "CVE-2019-6778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-6778"
    },
    {
      "name": "CVE-2020-10772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10772"
    },
    {
      "name": "CVE-2020-25637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25637"
    },
    {
      "name": "CVE-2018-10360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10360"
    },
    {
      "name": "CVE-2018-15859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15859"
    },
    {
      "name": "CVE-2017-13089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13089"
    },
    {
      "name": "CVE-2019-12779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12779"
    },
    {
      "name": "CVE-2019-1010238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1010238"
    },
    {
      "name": "CVE-2019-6690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-6690"
    },
    {
      "name": "CVE-2015-8317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8317"
    },
    {
      "name": "CVE-2018-4181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-4181"
    },
    {
      "name": "CVE-2019-8323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8323"
    },
    {
      "name": "CVE-2016-3616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3616"
    },
    {
      "name": "CVE-2018-14498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14498"
    },
    {
      "name": "CVE-2018-15861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15861"
    },
    {
      "name": "CVE-2019-7150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-7150"
    },
    {
      "name": "CVE-2019-17042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17042"
    },
    {
      "name": "CVE-2016-5008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5008"
    },
    {
      "name": "CVE-2014-4616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4616"
    }
  ],
  "initial_release_date": "2022-03-23T00:00:00",
  "last_revision_date": "2022-03-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2022-AVI-267",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-03-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Juniper Networks\nJunos Space. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de\ns\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Juniper Networks Junos Space",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11176 du 22 mars 2022",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11176\u0026cat=SIRT_1\u0026actp=LIST"
    }
  ]
}

CERTFR-2017-AVI-394

Vulnerability from certfr_avis - Published: 2017-11-07 - Updated: 2017-11-07

De multiples vulnérabilités ont été découvertes dans Google Android (Nexus). Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Google	Android	Google Android (Nexus) toutes versions n'intégrant pas le correctif de sécurité du 6 novembre 2017

References

Title

Publication Time

Tags

Bulletin de sécurité Google du 6 novembre 2017

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Google Android (Nexus) toutes versions n\u0027int\u00e9grant pas le correctif de s\u00e9curit\u00e9 du 6 novembre 2017",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-0830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0830"
    },
    {
      "name": "CVE-2017-11092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11092"
    },
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-11013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11013"
    },
    {
      "name": "CVE-2017-0842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0842"
    },
    {
      "name": "CVE-2017-0841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0841"
    },
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-11017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11017"
    },
    {
      "name": "CVE-2017-0833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0833"
    },
    {
      "name": "CVE-2017-0835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0835"
    },
    {
      "name": "CVE-2017-0834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0834"
    },
    {
      "name": "CVE-2017-0843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0843"
    },
    {
      "name": "CVE-2017-9077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-9077"
    },
    {
      "name": "CVE-2017-0840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0840"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-0831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0831"
    },
    {
      "name": "CVE-2017-7541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7541"
    },
    {
      "name": "CVE-2017-0832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0832"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-6264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6264"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-0836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0836"
    },
    {
      "name": "CVE-2017-11028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11028"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-11015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11015"
    },
    {
      "name": "CVE-2017-9690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-9690"
    },
    {
      "name": "CVE-2017-0839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0839"
    },
    {
      "name": "CVE-2017-11014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-11014"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    }
  ],
  "initial_release_date": "2017-11-07T00:00:00",
  "last_revision_date": "2017-11-07T00:00:00",
  "links": [],
  "reference": "CERTFR-2017-AVI-394",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-11-07T00:00:00.000000"
    },
    {
      "description": "Version initiale",
      "revision_date": "2017-11-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android\n(Nexus). Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android (Nexus)",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Google du 6 novembre 2017",
      "url": "https://source.android.com/security/bulletin/2017-11-01"
    }
  ]
}

CERTFR-2017-AVI-359

Vulnerability from certfr_avis - Published: 2017-10-17 - Updated: 2017-10-17

De multiples vulnérabilités ont été découvertes dans Ubuntu wpa_supplicant et hostpad. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 16.04 LTS
Ubuntu	Ubuntu	Ubuntu 17.04
Ubuntu	Ubuntu	Ubuntu 14.04 LTS

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-3455-1 du 17 octobre 2017

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 16.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 17.04",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-4476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4476"
    },
    {
      "name": "CVE-2017-13088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
    },
    {
      "name": "CVE-2017-13078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
    },
    {
      "name": "CVE-2017-13086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
    },
    {
      "name": "CVE-2017-13087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
    },
    {
      "name": "CVE-2017-13081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13081"
    },
    {
      "name": "CVE-2017-13079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13079"
    },
    {
      "name": "CVE-2017-13082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
    },
    {
      "name": "CVE-2017-13077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
    },
    {
      "name": "CVE-2016-4477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4477"
    },
    {
      "name": "CVE-2017-13080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
    }
  ],
  "initial_release_date": "2017-10-17T00:00:00",
  "last_revision_date": "2017-10-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2017-AVI-359",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Ubuntu\nwpa_supplicant et hostpad. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice \u00e0 distance et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Ubuntu wpa_supplicant et hostpad",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-3455-1 du 17 octobre 2017",
      "url": "https://usn.ubuntu.com/usn/usn-3455-1/"
    }
  ]
}

VAR-201710-0975

Vulnerability from variot - Updated: 2025-04-20 19:33

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients. An attacker within range of an affected AP and client may leverage these vulnerabilities to conduct attacks that are dependent on the data confidentiality protocols being used. Attacks may include arbitrary packet decryption and injection, TCP connection hijacking, HTTP content injection, or the replay of unicast and group-addressed frames. These vulnerabilities are referred to as Key Reinstallation Attacks or "KRACK" attacks. WPA (Wi-Fi Protected Access) is a system that protects wireless computer networks (Wi-Fi). The WIG2 wireless network sleep mode has an IGTK key complete reload vulnerability. WPA2 is prone to multiple security weaknesses. Exploiting these issues may allow an unauthorized user to intercept and manipulate data or disclose sensitive information. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

===================================================================== Red Hat Security Advisory

Synopsis: Important: wpa_supplicant security update Advisory ID: RHSA-2017:2907-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2017:2907 Issue date: 2017-10-17 CVE Names: CVE-2017-13077 CVE-2017-13078 CVE-2017-13080 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 =====================================================================

Summary:

An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64

Description:

The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues. Solution:

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Package List:

Red Hat Enterprise Linux Client (v. 7):

Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm

x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm

x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm

aarch64: wpa_supplicant-2.6-5.el7_4.1.aarch64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.aarch64.rpm

ppc64: wpa_supplicant-2.6-5.el7_4.1.ppc64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.ppc64.rpm

ppc64le: wpa_supplicant-2.6-5.el7_4.1.ppc64le.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.ppc64le.rpm

s390x: wpa_supplicant-2.6-5.el7_4.1.s390x.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.s390x.rpm

x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source: wpa_supplicant-2.6-5.el7_4.1.src.rpm

x86_64: wpa_supplicant-2.6-5.el7_4.1.x86_64.rpm wpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/

References:

https://access.redhat.com/security/cve/CVE-2017-13077 https://access.redhat.com/security/cve/CVE-2017-13078 https://access.redhat.com/security/cve/CVE-2017-13080 https://access.redhat.com/security/cve/CVE-2017-13082 https://access.redhat.com/security/cve/CVE-2017-13086 https://access.redhat.com/security/cve/CVE-2017-13087 https://access.redhat.com/security/cve/CVE-2017-13088 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/security/vulnerabilities/kracks

Contact:

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/

An attacker exploiting the vulnerabilities could force the vulnerable system to reuse cryptographic session keys, enabling a range of cryptographic attacks against the ciphers used in WPA1 and WPA2.

For the stable distribution (stretch), these problems have been fixed in version 2:2.4-1+deb9u1.

For the testing distribution (buster), these problems have been fixed in version 2:2.4-1.1.

For the unstable distribution (sid), these problems have been fixed in version 2:2.4-1.1.

We recommend that you upgrade your wpa packages. ========================================================================== Ubuntu Security Notice USN-3455-1 October 16, 2017

wpa vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

Ubuntu 17.04
Ubuntu 16.04 LTS
Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in wpa_supplicant.

Software Description: - wpa: client support for WPA and WPA2

Details:

Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly handled WPA2. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase parameters. A remote attacker could use this issue to cause a denial of service. (CVE-2016-4476)

Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase parameters. A local attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2016-4477)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 17.04: hostapd 2.4-0ubuntu9.1 wpasupplicant 2.4-0ubuntu9.1

Ubuntu 16.04 LTS: hostapd 2.4-0ubuntu6.2 wpasupplicant 2.4-0ubuntu6.2

Ubuntu 14.04 LTS: hostapd 2.1-0ubuntu1.5 wpasupplicant 2.1-0ubuntu1.5

After a standard system update you need to reboot your computer to make all the necessary changes.

Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/wpa_supplicant-2.6-i586-1_slack14.2.txz: Upgraded. This update includes patches to mitigate the WPA2 protocol issues known as "KRACK" (Key Reinstallation AttaCK), which may be used to decrypt data, hijack TCP connections, and to forge and inject packets. CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it. For more information, see: https://www.krackattacks.com/ https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13084 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088 ( Security fix ) +--------------------------+

Where to find the new packages: +-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you.

Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/wpa_supplicant-2.6-i486-1_slack14.0.txz

Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.0.txz

Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/wpa_supplicant-2.6-i486-1_slack14.1.txz

Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.1.txz

Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/wpa_supplicant-2.6-i586-1_slack14.2.txz

Updated package for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.2.txz

Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/wpa_supplicant-2.6-i586-2.txz

Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/wpa_supplicant-2.6-x86_64-2.txz

MD5 signatures: +-------------+

Slackware 14.0 package: d8ecfaadb50b3547967ab53733ffc019 wpa_supplicant-2.6-i486-1_slack14.0.txz

Slackware x86_64 14.0 package: f25216d28800504ce498705da7c9a825 wpa_supplicant-2.6-x86_64-1_slack14.0.txz

Slackware 14.1 package: 15c61050e4bab2581757befd86be74c0 wpa_supplicant-2.6-i486-1_slack14.1.txz

Slackware x86_64 14.1 package: 49fd537a520338744f7757615556d352 wpa_supplicant-2.6-x86_64-1_slack14.1.txz

Slackware 14.2 package: c5539f40c8510af89be92945f0f80185 wpa_supplicant-2.6-i586-1_slack14.2.txz

Slackware x86_64 14.2 package: 4c527ff84fcdfd7839f217bbce2e4ae4 wpa_supplicant-2.6-x86_64-1_slack14.2.txz

Slackware -current package: 28bd88a54e96368f7a7020c1f5fb67fe n/wpa_supplicant-2.6-i586-2.txz

Slackware x86_64 -current package: 464fc6b48d1ac077f47e9a3a8534c160 n/wpa_supplicant-2.6-x86_64-2.txz

Installation instructions: +------------------------+

Upgrade the package as root:

upgradepkg wpa_supplicant-2.6-i586-1_slack14.2.txz

+-----+

Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com

+------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

============================================================================= FreeBSD-SA-17:07.wpa Security Advisory The FreeBSD Project

Topic: WPA2 protocol vulnerability

Category: contrib Module: wpa Announced: 2017-10-16 Credits: Mathy Vanhoef Affects: All supported versions of FreeBSD. Corrected: 2017-10-17 17:30:18 UTC (stable/11, 11.1-STABLE) 2017-10-17 17:57:18 UTC (releng/11.1, 11.1-RELEASE-p2) 2017-10-17 17:56:03 UTC (releng/11.0, 11.0-RELEASE-p13) 2017-10-19 03:18:22 UTC (stable/10, 10.4-STABLE) 2017-10-19 03:20:17 UTC (releng/10.4, 10.4-RELEASE-p1) 2017-10-19 03:19:42 UTC (releng/10.3, 10.3-RELEASE-p22) CVE Name: CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088

For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .

Revision history

v1.0 2017-10-17 Initial release. v1.1 2017-10-19 Add patches for 10.x releases.

I.

hostapd and wpa_supplicant are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.

II. Problem Description

A vulnerability was found in how a number of implementations can be triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by replaying a specific frame that is used to manage the keys.

III. Impact

Such reinstallation of the encryption key can result in two different types of vulnerabilities: disabling replay protection and significantly reducing the security of encryption to the point of allowing frames to be decrypted or some parts of the keys to be determined by an attacker depending on which cipher is used.

IV. Workaround

An updated version of wpa_supplicant is available in the FreeBSD Ports Collection. Install version 2.6_2 or later of the security/wpa_supplicant port/pkg. Once installed, update /etc/rc.conf to use the new binary:

wpa_supplicant_program="/usr/local/sbin/wpa_supplicant"

and restart networking.

An updated version of hostapd is available in the FreeBSD Ports Collection. Install version 2.6_1 or later of the net/hostapd port/pkg. Once installed, update /etc/rc.conf to use the new binary:

hostapd_program="/usr/local/sbin/hostapd"

and restart hostapd.

V. Solution

Perform one of the following:

1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.

Restart the Wi-Fi network interfaces/hostapd or reboot the system.

2) To update your vulnerable system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

freebsd-update fetch

freebsd-update install

Restart the Wi-Fi network interfaces/hostapd or reboot the system.

3) To update your vulnerable system via a source code patch:

The following patches have been verified to apply to the applicable FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

[FreeBSD 11.0-RELEASE, 11.1-RELEASE, and 11-STABLE]

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch.asc

gpg --verify wpa-11.patch.asc

[FreeBSD 10.3-RELEASE, 10.4-RELEASE, and 10-STABLE]

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch.asc

gpg --verify wpa-10.patch.asc

b) Apply the patch. Execute the following commands as root:

cd /usr/src

patch < /path/to/patch

c) Recompile the operating system using buildworld and installworld as described in .

Restart the applicable daemons, or reboot the system.

VI. Correction details

The following list contains the correction revision numbers for each affected branch.

Branch/path Revision

stable/11/ r324697 releng/11.0/ r324698 releng/11.1/ r324699 stable/10/ r324739 releng/10.3/ r324740 releng/10.4/ r324741

To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

VII. References

The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEEHPf/b631yp++G4yy7Wfs1l3PaucFAlnoGpNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDFD RjdGRjZGQURGNUNBOUZCRTFCOENCMkVENjdFQ0Q2NURDRjZBRTcACgkQ7Wfs1l3P auc7WBAAm27w+fujv5sJsRxauUMopTVtRh5utwbDuoHTP+L+RCWmQfVBmueNQ0gf uJzMNxBIkbtY9LvyukpRsH3iD7mh26c0pd9rxxkkr4F96C9B5+W0amxJF1gdm54/ F/50FpY+lo7cNs5tiBjypPrg8UOBBI/1G4XR7130XC0HjaTwt1ngZ0oQUWUMSsIp gN5ZfPul81WPWd1NqF+vyObcJhwq/Y1uoexoO27o7GQCFZoL3enZy8c4f1xqMlVM 4HHkTgNGac6E0aW+ArH4J0DFFAOJXPqF8rdt+9XINfoBbtliIyOixJ4oh1n6eAR0 VpBWZKFNyXSlUKIvDGa+LDhxgL1jJXV0ABSyKlUOijdmr3bbbiQE9MW/MNv2AFTd OAFQ0QQtm9KCWp5JLh+FPIb/kR2l7MOUP+yz4zFcJpdGtl9tDLyPN8vRTq60bY8O y7tBcf/SMqkd/AIFdchL4zrOguKnRARydIlwTarp8wtAQI3MKSsa1B0wgsDtlL6K xfdjnwWMKvKKlNOW16e1WXXO0n/ucHV4njBE+bGPro3jLgXP2/WFZpIGAR3I4xrr SdD4AxSNiR9f3bL7LRfMIbugJAylWNSlTLWUOVUv0/ONh85LqbcCj13NI230B64K ETx2QOZgKnCs2oDNiw4aQHb7kvi2w94Iw/R1sAPkkxYJWO3reyE= =h/5q -----END PGP SIGNATURE-----

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201710-0975",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "linux enterprise point of sale",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "suse",
        "version": "11"
      },
      {
        "model": "linux enterprise server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "suse",
        "version": "11"
      },
      {
        "model": "openstack cloud",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "suse",
        "version": "6"
      },
      {
        "model": "linux enterprise desktop",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "suse",
        "version": "12"
      },
      {
        "model": "linux enterprise server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "suse",
        "version": "12"
      },
      {
        "model": "enterprise linux desktop",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "enterprise linux server",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.6.9"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "1.1"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.6.8"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.6.9"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "14.04"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.9"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.9"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.10"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.11"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.7"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "*"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.11"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.8"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.9"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.6"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "10"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.10"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.11"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.11"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.8"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "1.1"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.6.10"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.7.3"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "1.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.8"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.6.10"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.8"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.7.3"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "1.0"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.9"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.6"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.10"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.10"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.9"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.8"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "42.2"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.7"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "17.04"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.2.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.3.10"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.3"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "10.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.10"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.9"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.1"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.11"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.3"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.8"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.5.11"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "16.04"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.2"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.6.8"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "0.4.8"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.0"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "42.3"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "9front",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "adtran",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "avm",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "actiontec",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "aerohive",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "alcatel lucent",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "android open source",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "apple",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "arch linux",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "aruba",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "asustek computer",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "barracuda",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cambium",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "centos",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cradlepoint",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cypress semiconductor",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "d link",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "debian gnu linux",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "dell",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "draytek",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "edimax computer",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "engenius",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "endian",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "espressif",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "extreme",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "f secure",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "fedora",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "fortinet",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "gentoo linux",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "google",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "hostap",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ipfire",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "intel",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "juniper",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "lancom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "lede",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "lifx",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "microchip",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "microsoft",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "mojo",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "nest",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "netbsd",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "netgear",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "opnsense",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "omnirom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "open mesh",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "openbsd",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "peplink",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "red hat",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "riverbed",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "rockwell automation",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ruckus",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "suse linux",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "samsung mobile",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "sierra",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "slackware linux",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "sonos",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "sony",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "sophos",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "technicolor",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "texas instruments",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "toshiba commerce",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "toshiba electronic devices storage",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "toshiba memory",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "turris omnia",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ubiquiti",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ubuntu",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "volumio",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "watchguard",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "xiaomi",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "xirrus",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "zebra",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "zyxel",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "dd wrt",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "eero",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "pfsense",
        "version": null
      },
      {
        "model": "ubuntu",
        "scope": null,
        "trust": 0.8,
        "vendor": "canonical",
        "version": null
      },
      {
        "model": "gnu/linux",
        "scope": null,
        "trust": 0.8,
        "vendor": "debian",
        "version": null
      },
      {
        "model": "freebsd",
        "scope": null,
        "trust": 0.8,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "leap",
        "scope": null,
        "trust": 0.8,
        "vendor": "opensuse",
        "version": null
      },
      {
        "model": "linux enterprise desktop",
        "scope": null,
        "trust": 0.8,
        "vendor": "suse",
        "version": null
      },
      {
        "model": "linux enterprise point of sale",
        "scope": null,
        "trust": 0.8,
        "vendor": "suse",
        "version": null
      },
      {
        "model": "linux enterprise server",
        "scope": null,
        "trust": 0.8,
        "vendor": "suse",
        "version": null
      },
      {
        "model": "openstack cloud",
        "scope": null,
        "trust": 0.8,
        "vendor": "suse",
        "version": null
      },
      {
        "model": "hostapd",
        "scope": null,
        "trust": 0.8,
        "vendor": "w1 fi",
        "version": null
      },
      {
        "model": "wpa supplicant",
        "scope": null,
        "trust": 0.8,
        "vendor": "w1 fi",
        "version": null
      },
      {
        "model": "enterprise linux desktop",
        "scope": null,
        "trust": 0.8,
        "vendor": "red hat",
        "version": null
      },
      {
        "model": "enterprise linux server",
        "scope": null,
        "trust": 0.8,
        "vendor": "red hat",
        "version": null
      },
      {
        "model": "edge gateway",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "nec",
        "version": null
      },
      {
        "model": "sr-m20ac1",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "fujitsu",
        "version": "v02.10"
      },
      {
        "model": "sr-m20ac2",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "fujitsu",
        "version": "v02.10"
      },
      {
        "model": "alliance wi-fi protected access 2",
        "scope": null,
        "trust": 0.6,
        "vendor": "wi fi",
        "version": null
      },
      {
        "model": "scalance w-700",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.4,
        "vendor": "linux desktop",
        "version": "12"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.4,
        "vendor": "linux server",
        "version": "11"
      },
      {
        "model": "atom processor c3200 series for yocto project bsp mr4",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.3.2"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "6.1"
      },
      {
        "model": "pyxis supplystation",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "sinamics smart access module",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "v200"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.6.27.3264"
      },
      {
        "model": "meraki mr34",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "ck71a-atex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.2.0"
      },
      {
        "model": "macbook air",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "aironet series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "18500"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "8.0"
      },
      {
        "model": "meraki mr26",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.4"
      },
      {
        "model": "aironet series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "28000"
      },
      {
        "model": "enterprise linux for power big endian extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.5"
      },
      {
        "model": "meraki mr84",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "contact fl wlan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "510x0"
      },
      {
        "model": "windows server r2 for itanium-based systems sp1",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "2008"
      },
      {
        "model": "contact itc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "81130"
      },
      {
        "model": "enterprise linux workstation",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "10.0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726519.51.0.0"
      },
      {
        "model": "enterprise linux server extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "meraki mr18",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "8.1.0.3"
      },
      {
        "model": "scalance w1750d",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "secure ii med-surg bed",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "stryker",
        "version": "3002"
      },
      {
        "model": "contact fl wlan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "210x0"
      },
      {
        "model": "windows version for x64-based systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "1015110"
      },
      {
        "model": "aironet access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "contact fl wlan ap",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "24802-110"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.0"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.4.1"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2"
      },
      {
        "model": "wap371 wireless-ac n access point with single point setup",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "ex-handy",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "2090"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.3.2"
      },
      {
        "model": "contact rad-80211-xd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "0"
      },
      {
        "model": "ios",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "11.2"
      },
      {
        "model": "contact fl wlan dap",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "24802-110"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726519.10.9.1"
      },
      {
        "model": "arubaos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.3.1.25"
      },
      {
        "model": "pyxis medstation es",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "wireless ip phone",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "88210"
      },
      {
        "model": "pyxis stockstation system",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "macbook",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316819.51.7.1"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726519.10.9.2"
      },
      {
        "model": "scalance wlc712",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "contact fl wlan spa",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "0"
      },
      {
        "model": "meraki mr62",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "simatic et200 pro im154-6 pn iwlan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "tropos broadband mesh routers and bridges",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "abb",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316819.10.9.2"
      },
      {
        "model": "meraki mr33",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "instantos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.3.3"
      },
      {
        "model": "micros handheld terminal",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "oracle",
        "version": "0"
      },
      {
        "model": "windows server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "20120"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.2"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316018.33.9.2"
      },
      {
        "model": "windows version for 32-bit systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "1017030"
      },
      {
        "model": "atom processor c3200 series for yocto project bsp mr4.1",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "2.6"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "7.1.0"
      },
      {
        "model": "contact fl wlan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "110x0"
      },
      {
        "model": "windows for 32-bit systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "100"
      },
      {
        "model": "s3 med-surg bed",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "stryker",
        "version": "3002"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.4.2.4"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "11.1"
      },
      {
        "model": "contact fl comserver wlan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "232/422/4850"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.8"
      },
      {
        "model": "enterprise linux server update services for sap solutions",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7."
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "7.1.91.3272"
      },
      {
        "model": "instantos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "4.2.4.9"
      },
      {
        "model": "contact fl wlan ap",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "230802-110"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "6.1"
      },
      {
        "model": "enterprise linux for power little endian extended update supp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "meraki mr14",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "enterprise linux eus compute node",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7.5"
      },
      {
        "model": "aironet series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "18150"
      },
      {
        "model": "wireless client bridge 2.0.0.1-aruba501-b00",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "501"
      },
      {
        "model": "enterprise linux server extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "enterprise linux server tus",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726018.33.9.2"
      },
      {
        "model": "airport express",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "meraki mr16",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "clarity engine",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "1.0"
      },
      {
        "model": "meraki mr30h",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "airport extreme",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "windows server r2",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "20120"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "826520.0.2.3"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "8.0"
      },
      {
        "model": "contact bl2 bpc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "0"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.0.1"
      },
      {
        "model": "enterprise linux for ibm z systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "watch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "meraki mr32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.4"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "4.0"
      },
      {
        "model": "ruggedcom rx1400",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "cn70a-atex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "0"
      },
      {
        "model": "windows version for 32-bit systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "1015110"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.3"
      },
      {
        "model": "pyxis parx handheld",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726519.10"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "9.1.40.100"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.1.1"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.3"
      },
      {
        "model": "windows rt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "8.1"
      },
      {
        "model": "meraki mr42",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "instantos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "4.3.1.6"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.7.3"
      },
      {
        "model": "wap561 wireless-n dual radio selectable band access point",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.0.26.3000"
      },
      {
        "model": "instantos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.4.2"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.6"
      },
      {
        "model": "tvos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "11.2"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "6.0"
      },
      {
        "model": "windows server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "2016"
      },
      {
        "model": "contact rad-whg/wlan-xd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726018.33.9.3"
      },
      {
        "model": "wi-fi update for boot camp",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "6.4.0"
      },
      {
        "model": "suremark printer 2nr",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "4610"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "7.1.1"
      },
      {
        "model": "arubaos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.4.2"
      },
      {
        "model": "enterprise linux for power little endian extended update supp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.5"
      },
      {
        "model": "enterprise linux for power little endian",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "826520.0.0.0"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2.1"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.3.1.8"
      },
      {
        "model": "windows server for x64-based systems sp2",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "2008"
      },
      {
        "model": "pyxis supply roller",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.3"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.3"
      },
      {
        "model": "telepresence collaboration endpoint",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "6.2.61.3535"
      },
      {
        "model": "contact vmt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "70xx0"
      },
      {
        "model": "imac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "meraki mr72",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "watchos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4"
      },
      {
        "model": "enterprise linux for power little endian extended update supp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.0.25.3001"
      },
      {
        "model": "arubaos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "8.1.0.4"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "9.1"
      },
      {
        "model": "enterprise linux server tus",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "6.2"
      },
      {
        "model": "meraki mr53",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.1"
      },
      {
        "model": "wap551 wireless-n single radio selectable band access point",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "4.2"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.3.2"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316519.10"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "826020.0.0.0"
      },
      {
        "model": "wap121 wireless-n access point with single point setup",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "2.5"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.6.0.1000"
      },
      {
        "model": "wireless client bridge 1.0.1.3-hp501-b0012",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "501"
      },
      {
        "model": "i.roc ci70-ex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.0.0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "826020.0.2.2"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "7.1"
      },
      {
        "model": "cn70e-atex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726018.0.0.0"
      },
      {
        "model": "meraki mr24",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "suremark printer 1nr",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "4610"
      },
      {
        "model": "enterprise linux for ibm z systems extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "contact vmt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "50xx0"
      },
      {
        "model": "meraki mr74",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "ex-handy",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "090"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.4.4.15"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316519.51.7.1"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726519.51.7.20"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "726519.51.7.1"
      },
      {
        "model": "systems esp32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "espressif",
        "version": "0"
      },
      {
        "model": "watchos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4.1"
      },
      {
        "model": "enterprise linux server extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.5"
      },
      {
        "model": "micros handheld terminal 2.03.0.0.021r",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "oracle",
        "version": null
      },
      {
        "model": "aironet series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "38000"
      },
      {
        "model": "pyxis parx",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "dx70",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.1.9"
      },
      {
        "model": "enterprise linux server update services for sap solutions",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "intouch critical care bed",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "stryker",
        "version": "2141"
      },
      {
        "model": "pyxis anesthesia es",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "aironet series officeextend access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "18100"
      },
      {
        "model": "windows for x64-based systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "8.10"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316819.10.9.1"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "10.0.55.3000"
      },
      {
        "model": "windows for 32-bit systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "8.10"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "6.0"
      },
      {
        "model": "meraki mr66",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316519.10.9.1"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6"
      },
      {
        "model": "intouch critical care bed",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "stryker",
        "version": "2131"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "7.1.2"
      },
      {
        "model": "aironet series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "18300"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "enterprise linux for power big endian extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.6"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "10.0.0.50.1004"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.4.1.0"
      },
      {
        "model": "wap321 wireless-n access point with single point setup",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "simatic iwlan-pb/link",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "aironet 1810w series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "meraki mr52",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "enterprise linux for ibm z systems extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.5"
      },
      {
        "model": "meraki mr12",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "airmesh msr",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316519.51.7.20"
      },
      {
        "model": "watchos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4.2"
      },
      {
        "model": "contact fl wlan ec",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "24802-110"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "4.2.4.8"
      },
      {
        "model": "systems esp8266",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "espressif",
        "version": "0"
      },
      {
        "model": "tv",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "pad-ex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "010"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.0.0.1205"
      },
      {
        "model": "ip phone",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "88610"
      },
      {
        "model": "clarity engine",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "1.0.0.1"
      },
      {
        "model": "aironet series access points",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "15600"
      },
      {
        "model": "windows for 32-bit systems sp1",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "7"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "4.3.1.5"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.2"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "8.1"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.8"
      },
      {
        "model": "windows for x64-based systems sp1",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "7"
      },
      {
        "model": "enterprise linux for ibm z systems extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "meraki mr58",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "windows version for 32-bit systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "1016070"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316519.10.9.2"
      },
      {
        "model": "pyxis parassist system",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "0"
      },
      {
        "model": "windows server for 32-bit systems sp2",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "2008"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "4.3"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "7.0"
      },
      {
        "model": "simatic mobile panel 277 iwlan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "pyxis medstation t2",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "40000"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "826020.0.2.3"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "6.0.1"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.1"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316519.51.0.0"
      },
      {
        "model": "wi-fi update for boot camp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "enterprise linux server update services for sap solutions",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "ipad",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "contact vmt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "30xx0"
      },
      {
        "model": "enterprise linux for power big endian",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.6"
      },
      {
        "model": "wireless client bridge",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "5010"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.0.1"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "11.5"
      },
      {
        "model": "meraki mr11",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.3.3"
      },
      {
        "model": "pyxis anesthesia system",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "40000"
      },
      {
        "model": "tvos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2.2"
      },
      {
        "model": "pyxis anesthesia system",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "35000"
      },
      {
        "model": "automation stratix 15.3 jc1",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "rockwell",
        "version": "5100"
      },
      {
        "model": "enterprise linux server aus",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "pyxis ciisafe workstation",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "bd",
        "version": "??0"
      },
      {
        "model": "enterprise linux for power big endian extended update support",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "-7.4"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.7"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316819.51.0.0"
      },
      {
        "model": "ipad air",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "7.0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.4.1"
      },
      {
        "model": "enterprise linux eus compute node",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7.6"
      },
      {
        "model": "enterprise linux for scientific computing",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "8.1.71.3608"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "9.1.41.3024"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.4.2.1"
      },
      {
        "model": "enterprise linux eus compute node",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "7.4"
      },
      {
        "model": "dx80",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "9.0"
      },
      {
        "model": "contact bl2 ppc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "0"
      },
      {
        "model": "contact tpc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "60130"
      },
      {
        "model": "ipod touch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.1"
      },
      {
        "model": "ck70a-atex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "0"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2.1"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.3.1"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316819.51.7.20"
      },
      {
        "model": "macbook pro",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316819.10"
      },
      {
        "model": "windows for x64-based systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "100"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.7.8"
      },
      {
        "model": "active management technology",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "9.5"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.1"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.4"
      },
      {
        "model": "smart-ex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "010"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "826520.0.2.2"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316018.33.9.3"
      },
      {
        "model": "tab-ex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "010"
      },
      {
        "model": "arubaos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.3.3"
      },
      {
        "model": "iphone",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "macmini",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.4.4.16"
      },
      {
        "model": "contact fl wlan epa",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "phoenix",
        "version": "0"
      },
      {
        "model": "airport time capsule",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "0"
      },
      {
        "model": "alliance wpa2 (wi-fi protected access",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "wi fi",
        "version": "2)0"
      },
      {
        "model": "airport base station",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.7.9"
      },
      {
        "model": "scalance wlc711",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "ruggedcom rs9xxw",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.3.1.15"
      },
      {
        "model": "networks unifi access point",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubiquiti",
        "version": "0"
      },
      {
        "model": "suremark printer 2cr",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "4610"
      },
      {
        "model": "ip phone",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "88650"
      },
      {
        "model": "arubaos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.4"
      },
      {
        "model": "airport base station",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.7.7"
      },
      {
        "model": "instantos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "arubanetworks",
        "version": "6.5.4"
      },
      {
        "model": "asa 5506w-x w/ firepower services",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "windows version for x64-based systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "1016070"
      },
      {
        "model": "airport base station",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.6.9"
      },
      {
        "model": "s3 med-surg bed",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "stryker",
        "version": "3005"
      },
      {
        "model": "dual band wireless-ac",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "intel",
        "version": "316018.0.0.0"
      },
      {
        "model": "smart-ex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pepperl fuchs",
        "version": "2010"
      },
      {
        "model": "windows version for x64-based systems",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "microsoft",
        "version": "1017030"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "11.1"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "ubuntu linux",
        "version": "14.04"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "ubuntu linux",
        "version": "16.04"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "ubuntu linux",
        "version": "17.04"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "debian linux",
        "version": "8.0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "debian linux",
        "version": "9.0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "freebsd",
        "version": "*"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "freebsd",
        "version": "10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "freebsd",
        "version": "10.4"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "freebsd",
        "version": "11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "freebsd",
        "version": "11.1"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "leap",
        "version": "42.2"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "leap",
        "version": "42.3"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "linux desktop",
        "version": "7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "linux server",
        "version": "7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.2.4"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.2.5"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.2.6"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.2.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.3.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.3.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.3.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.3.11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.4.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.4.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.4.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.4.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.4.11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.5.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.5.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.5.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.5.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.5.11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.6.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.6.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.6.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "0.7.3"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "1.0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "1.1"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.1"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.2"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.3"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.4"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.5"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "hostapd",
        "version": "2.6"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.2.4"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.2.5"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.2.6"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.2.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.2.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.3.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.3.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.3.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.3.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.3.11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.4.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.4.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.4.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.4.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.4.11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.5.7"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.5.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.5.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.5.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.5.11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.6.8"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.6.9"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.6.10"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "0.7.3"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "1.0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "1.1"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.0"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.1"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.2"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.3"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.4"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.5"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wpa supplicant",
        "version": "2.6"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "linux point of sale",
        "version": "11"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "linux server",
        "version": "12"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "openstack cloud",
        "version": "6"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "BID",
        "id": "101274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:canonical:ubuntu",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:debian:debian_linux",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:freebsd:freebsd",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:opensuse_project:leap",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:suse:linux_enterprise_desktop",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:suse:suse_linux_enterprise_point_of_sale",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:suse:linux_enterprise_server",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:suse:openstack_cloud",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:w1.fi:hostapd",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:w1.fi:wpa_supplicant",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:redhat:enterprise_linux_desktop",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:redhat:enterprise_linux_server",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:nec:nec_edge_gateway",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:fujitsu:sr-m20ac1",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:fujitsu:sr-m20ac2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Mathy Vanhoef from imec-DistriNet and KU Leuven.",
    "sources": [
      {
        "db": "BID",
        "id": "101274"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2017-13088",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 2.9,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 5.5,
            "id": "CVE-2017-13088",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "LOW",
            "trust": 1.9,
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 5.5,
            "id": "CNVD-2017-30397",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 5.5,
            "id": "b8631bf1-6bd8-4549-b275-107397f54fc7",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.2,
            "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 1.6,
            "id": "CVE-2017-13088",
            "impactScore": 3.6,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2017-13088",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2017-13088",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2017-30397",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201710-389",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "IVD",
            "id": "b8631bf1-6bd8-4549-b275-107397f54fc7",
            "trust": 0.2,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2017-13088",
            "trust": 0.1,
            "value": "LOW"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients. An attacker within range of an affected AP and client may leverage these vulnerabilities to conduct attacks that are dependent on the data confidentiality protocols being used. Attacks may include arbitrary packet decryption and injection, TCP connection hijacking, HTTP content injection, or the replay of unicast and group-addressed frames. These vulnerabilities are referred to as Key Reinstallation Attacks or \"KRACK\" attacks. WPA (Wi-Fi Protected Access) is a system that protects wireless computer networks (Wi-Fi). The WIG2 wireless network sleep mode has an IGTK key complete reload vulnerability. WPA2  is prone to multiple security weaknesses. \nExploiting these issues may allow an unauthorized user to intercept and manipulate data or disclose sensitive information. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Important: wpa_supplicant security update\nAdvisory ID:       RHSA-2017:2907-01\nProduct:           Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2017:2907\nIssue date:        2017-10-17\nCVE Names:         CVE-2017-13077 CVE-2017-13078 CVE-2017-13080 \n                   CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 \n                   CVE-2017-13088 \n=====================================================================\n\n1. Summary:\n\nAn update for wpa_supplicant is now available for Red Hat Enterprise Linux\n7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Client (v. 7) - x86_64\nRed Hat Enterprise Linux ComputeNode (v. 7) - x86_64\nRed Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64\nRed Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\nThe wpa_supplicant packages contain an 802.1X Supplicant with support for\nWEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication\nmethods. They implement key negotiation with a WPA Authenticator for client\nstations and controls the roaming and IEEE 802.11 authentication and\nassociation of the WLAN driver. A remote attacker within Wi-Fi range\ncould exploit these attacks to decrypt Wi-Fi traffic or possibly inject\nforged Wi-Fi packets by manipulating cryptographic handshakes used by the\nWPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080,\nCVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream\nacknowledges Mathy Vanhoef (University of Leuven) as the original reporter\nof these issues. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Package List:\n\nRed Hat Enterprise Linux Client (v. 7):\n\nSource:\nwpa_supplicant-2.6-5.el7_4.1.src.rpm\n\nx86_64:\nwpa_supplicant-2.6-5.el7_4.1.x86_64.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm\n\nRed Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nwpa_supplicant-2.6-5.el7_4.1.src.rpm\n\nx86_64:\nwpa_supplicant-2.6-5.el7_4.1.x86_64.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 7):\n\nSource:\nwpa_supplicant-2.6-5.el7_4.1.src.rpm\n\naarch64:\nwpa_supplicant-2.6-5.el7_4.1.aarch64.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.aarch64.rpm\n\nppc64:\nwpa_supplicant-2.6-5.el7_4.1.ppc64.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.ppc64.rpm\n\nppc64le:\nwpa_supplicant-2.6-5.el7_4.1.ppc64le.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.ppc64le.rpm\n\ns390x:\nwpa_supplicant-2.6-5.el7_4.1.s390x.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.s390x.rpm\n\nx86_64:\nwpa_supplicant-2.6-5.el7_4.1.x86_64.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nwpa_supplicant-2.6-5.el7_4.1.src.rpm\n\nx86_64:\nwpa_supplicant-2.6-5.el7_4.1.x86_64.rpm\nwpa_supplicant-debuginfo-2.6-5.el7_4.1.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2017-13077\nhttps://access.redhat.com/security/cve/CVE-2017-13078\nhttps://access.redhat.com/security/cve/CVE-2017-13080\nhttps://access.redhat.com/security/cve/CVE-2017-13082\nhttps://access.redhat.com/security/cve/CVE-2017-13086\nhttps://access.redhat.com/security/cve/CVE-2017-13087\nhttps://access.redhat.com/security/cve/CVE-2017-13088\nhttps://access.redhat.com/security/updates/classification/#important\nhttps://access.redhat.com/security/vulnerabilities/kracks\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2017 Red Hat, Inc. Those vulnerabilities applies to both the access point\n(implemented in hostapd) and the station (implemented in wpa_supplicant). \n\nAn attacker exploiting the vulnerabilities could force the vulnerable system to\nreuse cryptographic session keys, enabling a range of cryptographic attacks\nagainst the ciphers used in WPA1 and WPA2. \n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 2:2.4-1+deb9u1. \n\nFor the testing distribution (buster), these problems have been fixed\nin version 2:2.4-1.1. \n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 2:2.4-1.1. \n\nWe recommend that you upgrade your wpa packages. ==========================================================================\nUbuntu Security Notice USN-3455-1\nOctober 16, 2017\n\nwpa vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 17.04\n- Ubuntu 16.04 LTS\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in wpa_supplicant. \n\nSoftware Description:\n- wpa: client support for WPA and WPA2\n\nDetails:\n\nMathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly\nhandled WPA2. (CVE-2017-13077,\nCVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,\nCVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n\nImre Rad discovered that wpa_supplicant and hostapd incorrectly handled\ninvalid characters in passphrase parameters. A remote attacker could use\nthis issue to cause a denial of service. (CVE-2016-4476)\n\nImre Rad discovered that wpa_supplicant and hostapd incorrectly handled\ninvalid characters in passphrase parameters. A local attacker could use\nthis issue to cause a denial of service, or possibly execute arbitrary\ncode. (CVE-2016-4477)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 17.04:\n  hostapd                         2.4-0ubuntu9.1\n  wpasupplicant                   2.4-0ubuntu9.1\n\nUbuntu 16.04 LTS:\n  hostapd                         2.4-0ubuntu6.2\n  wpasupplicant                   2.4-0ubuntu6.2\n\nUbuntu 14.04 LTS:\n  hostapd                         2.1-0ubuntu1.5\n  wpasupplicant                   2.1-0ubuntu1.5\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\n\nHere are the details from the Slackware 14.2 ChangeLog:\n+--------------------------+\npatches/packages/wpa_supplicant-2.6-i586-1_slack14.2.txz:  Upgraded. \n  This update includes patches to mitigate the WPA2 protocol issues known\n  as \"KRACK\" (Key Reinstallation AttaCK), which may be used to decrypt data,\n  hijack TCP connections, and to forge and inject packets. \n  CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT)\n    Reassociation Request and reinstalling the pairwise encryption key (PTK-TK)\n    while processing it. \n  For more information, see:\n    https://www.krackattacks.com/\n    https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13084\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087\n    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088\n  (* Security fix *)\n+--------------------------+\n\n\nWhere to find the new packages:\n+-----------------------------+\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project!  :-)\n\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you. \n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/wpa_supplicant-2.6-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/wpa_supplicant-2.6-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/wpa_supplicant-2.6-i586-1_slack14.2.txz\n\nUpdated package for Slackware x86_64 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/wpa_supplicant-2.6-x86_64-1_slack14.2.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/wpa_supplicant-2.6-i586-2.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/wpa_supplicant-2.6-x86_64-2.txz\n\n\nMD5 signatures:\n+-------------+\n\nSlackware 14.0 package:\nd8ecfaadb50b3547967ab53733ffc019  wpa_supplicant-2.6-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\nf25216d28800504ce498705da7c9a825  wpa_supplicant-2.6-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\n15c61050e4bab2581757befd86be74c0  wpa_supplicant-2.6-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\n49fd537a520338744f7757615556d352  wpa_supplicant-2.6-x86_64-1_slack14.1.txz\n\nSlackware 14.2 package:\nc5539f40c8510af89be92945f0f80185  wpa_supplicant-2.6-i586-1_slack14.2.txz\n\nSlackware x86_64 14.2 package:\n4c527ff84fcdfd7839f217bbce2e4ae4  wpa_supplicant-2.6-x86_64-1_slack14.2.txz\n\nSlackware -current package:\n28bd88a54e96368f7a7020c1f5fb67fe  n/wpa_supplicant-2.6-i586-2.txz\n\nSlackware x86_64 -current package:\n464fc6b48d1ac077f47e9a3a8534c160  n/wpa_supplicant-2.6-x86_64-2.txz\n\n\nInstallation instructions:\n+------------------------+\n\nUpgrade the package as root:\n# upgradepkg wpa_supplicant-2.6-i586-1_slack14.2.txz\n\n\n+-----+\n\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list:                          |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message:                                                     |\n|                                                                        |\n|   unsubscribe slackware-security                                       |\n|                                                                        |\n| You will get a confirmation message back containing instructions to    |\n| complete the process.  Please do not reply to this email address. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-17:07.wpa                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          WPA2 protocol vulnerability\n\nCategory:       contrib\nModule:         wpa\nAnnounced:      2017-10-16\nCredits:        Mathy Vanhoef\nAffects:        All supported versions of FreeBSD. \nCorrected:      2017-10-17 17:30:18 UTC (stable/11, 11.1-STABLE)\n                2017-10-17 17:57:18 UTC (releng/11.1, 11.1-RELEASE-p2)\n                2017-10-17 17:56:03 UTC (releng/11.0, 11.0-RELEASE-p13)\n                2017-10-19 03:18:22 UTC (stable/10, 10.4-STABLE)\n                2017-10-19 03:20:17 UTC (releng/10.4, 10.4-RELEASE-p1)\n                2017-10-19 03:19:42 UTC (releng/10.3, 10.3-RELEASE-p22)\nCVE Name:       CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,\n                CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n                CVE-2017-13086, CVE-2017-13087, CVE-2017-13088\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\n0.   Revision history\n\nv1.0  2017-10-17 Initial release. \nv1.1  2017-10-19 Add patches for 10.x releases. \n\nI. \n\nhostapd and wpa_supplicant are implementations of user space daemon for\naccess points and wireless client that implements the WPA2 protocol. \n\nII.  Problem Description\n\nA vulnerability was found in how a number of implementations can be\ntriggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by\nreplaying a specific frame that is used to manage the keys. \n\nIII. Impact\n\nSuch reinstallation of the encryption key can result in two different\ntypes of vulnerabilities: disabling replay protection and significantly\nreducing the security of encryption to the point of allowing frames to\nbe decrypted or some parts of the keys to be determined by an attacker\ndepending on which cipher is used. \n\nIV.  Workaround\n\nAn updated version of wpa_supplicant is available in the FreeBSD Ports\nCollection. Install version 2.6_2 or later of the\nsecurity/wpa_supplicant port/pkg. Once installed, update /etc/rc.conf\nto use the new binary:\n\nwpa_supplicant_program=\"/usr/local/sbin/wpa_supplicant\"\n\nand restart networking. \n\nAn updated version of hostapd is available in the FreeBSD Ports\nCollection. Install version 2.6_1 or later of the net/hostapd port/pkg. \nOnce installed, update /etc/rc.conf to use the new binary:\n\nhostapd_program=\"/usr/local/sbin/hostapd\"\n\nand restart hostapd. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nRestart the Wi-Fi network interfaces/hostapd or reboot the system. \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nRestart the Wi-Fi network interfaces/hostapd or reboot the system. \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 11.0-RELEASE, 11.1-RELEASE, and 11-STABLE]\n# fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch\n# fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch.asc\n# gpg --verify wpa-11.patch.asc\n\n[FreeBSD 10.3-RELEASE, 10.4-RELEASE, and 10-STABLE]\n# fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch\n# fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch.asc\n# gpg --verify wpa-10.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the applicable daemons, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/11/                                                        r324697\nreleng/11.0/                                                      r324698\nreleng/11.1/                                                      r324699\nstable/10/                                                        r324739\nreleng/10.3/                                                      r324740\nreleng/10.4/                                                      r324741\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt\u003e\n\u003cURL:https://www.krackattacks.com/\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc\u003e\n-----BEGIN PGP SIGNATURE-----\n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\nETx2QOZgKnCs2oDNiw4aQHb7kvi2w94Iw/R1sAPkkxYJWO3reyE=\n=h/5q\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      },
      {
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "BID",
        "id": "101274"
      },
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "db": "PACKETSTORM",
        "id": "144652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144630"
      },
      {
        "db": "PACKETSTORM",
        "id": "144632"
      },
      {
        "db": "PACKETSTORM",
        "id": "144663"
      },
      {
        "db": "PACKETSTORM",
        "id": "144669"
      }
    ],
    "trust": 3.87
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#228519",
        "trust": 4.2
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088",
        "trust": 4.1
      },
      {
        "db": "BID",
        "id": "101274",
        "trust": 2.6
      },
      {
        "db": "LENOVO",
        "id": "LEN-17420",
        "trust": 2.5
      },
      {
        "db": "SECTRACK",
        "id": "1039577",
        "trust": 1.7
      },
      {
        "db": "SECTRACK",
        "id": "1039576",
        "trust": 1.7
      },
      {
        "db": "SECTRACK",
        "id": "1039581",
        "trust": 1.7
      },
      {
        "db": "SECTRACK",
        "id": "1039578",
        "trust": 1.7
      },
      {
        "db": "SECTRACK",
        "id": "1039573",
        "trust": 1.7
      },
      {
        "db": "SIEMENS",
        "id": "SSA-901333",
        "trust": 1.7
      },
      {
        "db": "CERT@VDE",
        "id": "VDE-2017-005",
        "trust": 1.7
      },
      {
        "db": "ICS CERT",
        "id": "ICSMA-18-114-01",
        "trust": 1.2
      },
      {
        "db": "ICS CERT",
        "id": "ICSMA-19-029-01",
        "trust": 1.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-353-02",
        "trust": 1.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-318-01",
        "trust": 1.1
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389",
        "trust": 0.8
      },
      {
        "db": "JUNIPER",
        "id": "JSA10827",
        "trust": 0.8
      },
      {
        "db": "DLINK",
        "id": "SAP10075",
        "trust": 0.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-318-02A",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU90609033",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179",
        "trust": 0.8
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.4125",
        "trust": 0.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-299-02",
        "trust": 0.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-318-02",
        "trust": 0.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-325-01",
        "trust": 0.3
      },
      {
        "db": "IVD",
        "id": "B8631BF1-6BD8-4549-B275-107397F54FC7",
        "trust": 0.2
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144652",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144630",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144632",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144663",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144669",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "db": "BID",
        "id": "101274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "PACKETSTORM",
        "id": "144652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144630"
      },
      {
        "db": "PACKETSTORM",
        "id": "144632"
      },
      {
        "db": "PACKETSTORM",
        "id": "144663"
      },
      {
        "db": "PACKETSTORM",
        "id": "144669"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "id": "VAR-201710-0975",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      }
    ],
    "trust": 1.4003193450000002
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      }
    ]
  },
  "last_update_date": "2025-04-20T19:33:45.856000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "ARUBA-PSA-2017-007",
        "trust": 0.8,
        "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt"
      },
      {
        "title": "DSA-3999",
        "trust": 0.8,
        "url": "https://www.debian.org/security/2017/dsa-3999"
      },
      {
        "title": "FreeBSD-SA-17:07.wpa",
        "trust": 0.8,
        "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-17:07.wpa.asc"
      },
      {
        "title": "LEN-17420",
        "trust": 0.8,
        "url": "https://support.lenovo.com/jp/en/product_security/len-17420"
      },
      {
        "title": "NV17-024",
        "trust": 0.8,
        "url": "http://jpn.nec.com/security-info/secinfo/nv17-024.html"
      },
      {
        "title": "SUSE-SU-2017:2745",
        "trust": 0.8,
        "url": "https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
      },
      {
        "title": "SUSE-SU-2017:2752",
        "trust": 0.8,
        "url": "https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
      },
      {
        "title": "openSUSE-SU-2017:2755",
        "trust": 0.8,
        "url": "https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
      },
      {
        "title": "KRACKs - wpa_supplicant Multiple Vulnerabilities",
        "trust": 0.8,
        "url": "https://access.redhat.com/security/vulnerabilities/kracks"
      },
      {
        "title": "RHSA-2017:2907",
        "trust": 0.8,
        "url": "https://access.redhat.com/errata/RHSA-2017:2907"
      },
      {
        "title": "USN-3455-1",
        "trust": 0.8,
        "url": "https://usn.ubuntu.com/usn/USN-3455-1/"
      },
      {
        "title": "WPA packet number reuse with replayed messages and key reinstallation",
        "trust": 0.8,
        "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
      },
      {
        "title": "Wi-Fi\u306e\u8a8d\u8a3c\uff0f\u6697\u53f7\u5316\u6280\u8853WPA2\u304a\u3088\u3073WPA\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066  ",
        "trust": 0.8,
        "url": "http://www.fujitsu.com/jp/products/network/support/2017/srm-01/index.html"
      },
      {
        "title": "WPA2\u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u5f0a\u793e\u8abf\u67fb\u30fb\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066",
        "trust": 0.8,
        "url": "http://www.iodata.jp/support/information/2017/wpa2/"
      },
      {
        "title": "\u7121\u7ddaLAN \u8a8d\u8a3c\uff0f\u6697\u53f7\u5316\u6280\u8853WPA2\u304a\u3088\u3073WPA\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306e\u304a\u77e5\u3089\u305b ",
        "trust": 0.8,
        "url": "http://www.fmworld.net/biz/common/info/20171110/"
      },
      {
        "title": "Patch for WPA2 Wireless Network Sleep Mode IGTK Key Reload Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/103827"
      },
      {
        "title": "Multiple WiFi product WPA2 Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=75503"
      },
      {
        "title": "Red Hat: Important: wpa_supplicant security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20172907 - Security Advisory"
      },
      {
        "title": "Red Hat: CVE-2017-13088",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=CVE-2017-13088"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=CVE-2017-13088"
      },
      {
        "title": "Ubuntu Security Notice: wpa vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=USN-3455-1"
      },
      {
        "title": "Debian Security Advisories: DSA-3999-1 wpa -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=08990d9925276738bd732fa4d58f9ef0"
      },
      {
        "title": "Arch Linux Advisories: [ASA-201710-23] hostapd: man-in-the-middle",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=ASA-201710-23"
      },
      {
        "title": "Arch Linux Advisories: [ASA-201710-22] wpa_supplicant: man-in-the-middle",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=ASA-201710-22"
      },
      {
        "title": "Siemens Security Advisories: Siemens Security Advisory",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=6df91267eee9400a24a98876f50ffe84"
      },
      {
        "title": "Android Security Bulletins: Android Security Bulletin\u2014November 2017",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=android_security_bulletins\u0026qid=8c29eb008bb212762e5cfb25c7c5c0d5"
      },
      {
        "title": "Cisco: Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20171016-wpa"
      },
      {
        "title": "Oracle: Oracle Critical Patch Update Advisory - July 2018",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=5f8c525f1408011628af1792207b2099"
      },
      {
        "title": "Oracle Linux Bulletins: Oracle Linux Bulletin - October 2017",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins\u0026qid=7251d5e5f2b1771951980ad7cfde50ba"
      },
      {
        "title": "KRACK",
        "trust": 0.1,
        "url": "https://github.com/chinatso/KRACK "
      },
      {
        "title": "krackinfo",
        "trust": 0.1,
        "url": "https://github.com/kristate/krackinfo "
      },
      {
        "title": "nixos-issue-db-example",
        "trust": 0.1,
        "url": "https://github.com/andir/nixos-issue-db-example "
      },
      {
        "title": "The Register",
        "trust": 0.1,
        "url": "https://www.theregister.co.uk/2017/11/07/android_november_security_update/"
      },
      {
        "title": "The Register",
        "trust": 0.1,
        "url": "https://www.theregister.co.uk/2017/10/16/wpa2_inscure_krackattack/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-323",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-330",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-254",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.7,
        "url": "https://www.krackattacks.com/"
      },
      {
        "trust": 3.3,
        "url": "https://source.android.com/security/bulletin/2017-11-01"
      },
      {
        "trust": 2.9,
        "url": "http://www.securityfocus.com/bid/101274"
      },
      {
        "trust": 2.8,
        "url": "http://www.arubanetworks.com/assets/alert/aruba-psa-2017-007.txt"
      },
      {
        "trust": 2.8,
        "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20171016-wpa"
      },
      {
        "trust": 2.6,
        "url": "https://access.redhat.com/security/vulnerabilities/kracks"
      },
      {
        "trust": 2.5,
        "url": "http://www.debian.org/security/2017/dsa-3999"
      },
      {
        "trust": 2.2,
        "url": "https://access.redhat.com/errata/rhsa-2017:2907"
      },
      {
        "trust": 2.1,
        "url": "http://www.kb.cert.org/vuls/id/228519"
      },
      {
        "trust": 1.8,
        "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
      },
      {
        "trust": 1.8,
        "url": "http://www.ubuntu.com/usn/usn-3455-1"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1039581"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1039578"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1039577"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1039576"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1039573"
      },
      {
        "trust": 1.7,
        "url": "https://support.lenovo.com/us/en/product_security/len-17420"
      },
      {
        "trust": 1.7,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-17:07.wpa.asc"
      },
      {
        "trust": 1.7,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
      },
      {
        "trust": 1.7,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
      },
      {
        "trust": 1.7,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
      },
      {
        "trust": 1.7,
        "url": "https://security.gentoo.org/glsa/201711-03"
      },
      {
        "trust": 1.7,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf"
      },
      {
        "trust": 1.7,
        "url": "https://cert.vde.com/en-us/advisories/vde-2017-005"
      },
      {
        "trust": 1.7,
        "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
      },
      {
        "trust": 1.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13088"
      },
      {
        "trust": 1.2,
        "url": "https://ics-cert.us-cert.gov/advisories/icsma-18-114-01"
      },
      {
        "trust": 1.1,
        "url": "https://papers.mathyvanhoef.com/ccs2017.pdf"
      },
      {
        "trust": 1.1,
        "url": "https://w1.fi/security/2017-1/"
      },
      {
        "trust": 1.1,
        "url": "https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00101\u0026languageid=en-fr"
      },
      {
        "trust": 1.1,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2017-13080"
      },
      {
        "trust": 1.1,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-353-02"
      },
      {
        "trust": 1.1,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-318-01"
      },
      {
        "trust": 1.1,
        "url": "https://ics-cert.us-cert.gov/advisories/icsma-19-029-01"
      },
      {
        "trust": 0.9,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13088"
      },
      {
        "trust": 0.8,
        "url": "https://cwe.mitre.org/data/definitions/323.html"
      },
      {
        "trust": 0.8,
        "url": "https://actiontecsupport.zendesk.com/hc/en-us/articles/115005205283-krack-vulnerability"
      },
      {
        "trust": 0.8,
        "url": "https://www3.aerohive.com/support/security-bulletins/product-security-announcement-aerohives-response-to-krack-10162017.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.al-enterprise.com/en/support/security-alert-krack"
      },
      {
        "trust": 0.8,
        "url": "https://support.apple.com/en-gb/ht208222"
      },
      {
        "trust": 0.8,
        "url": "https://security.archlinux.org/avg-447"
      },
      {
        "trust": 0.8,
        "url": "https://www.asus.com/static_webpage/asus-product-security-advisory/"
      },
      {
        "trust": 0.8,
        "url": "https://community.barracudanetworks.com/forum/index.php?/topic/23525-security-advisories/page-2"
      },
      {
        "trust": 0.8,
        "url": "https://lists.centos.org/pipermail/centos-announce/2017-october/022569.html"
      },
      {
        "trust": 0.8,
        "url": "https://community.cypress.com/docs/doc-13871"
      },
      {
        "trust": 0.8,
        "url": "http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=sap10075"
      },
      {
        "trust": 0.8,
        "url": "http://www.dell.com/support/article/sln307822"
      },
      {
        "trust": 0.8,
        "url": "https://github.com/espressif/esp8266_nonos_sdk"
      },
      {
        "trust": 0.8,
        "url": "https://extremeportal.force.com/extrarticledetail?n=000018005"
      },
      {
        "trust": 0.8,
        "url": "https://bodhi.fedoraproject.org/updates/fedora-2017-60bfb576b7"
      },
      {
        "trust": 0.8,
        "url": "http://www.fortiguard.com/psirt/fg-ir-17-196"
      },
      {
        "trust": 0.8,
        "url": "https://www.freebsd.org/security/advisories/freebsd-sa-17:07.wpa.asc"
      },
      {
        "trust": 0.8,
        "url": "https://bugs.gentoo.org/634440"
      },
      {
        "trust": 0.8,
        "url": "https://support.hpe.com/hpsc/doc/public/display?sp4ts.oid=null\u0026doclocale=en_us\u0026docid=emr_na-a00029151en_us"
      },
      {
        "trust": 0.8,
        "url": "https://kb.juniper.net/jsa10827"
      },
      {
        "trust": 0.8,
        "url": "https://support.lenovo.com/ca/en/product_security/len-17420"
      },
      {
        "trust": 0.8,
        "url": "http://www.microchip.com/wwwproducts/en/atwinc1500"
      },
      {
        "trust": 0.8,
        "url": "http://mail-index.netbsd.org/source-changes/2017/10/16/msg088877.html"
      },
      {
        "trust": 0.8,
        "url": "https://kb.netgear.com/000049498/security-advisory-for-wpa-2-vulnerabilities-psv-2017-2826-psv-2017-2836-psv-2017-2837"
      },
      {
        "trust": 0.8,
        "url": "https://forum.peplink.com/t/security-advisory-wpa2-vulnerability-vu-228519/12715"
      },
      {
        "trust": 0.8,
        "url": "https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-101617-v1.0.pdf"
      },
      {
        "trust": 0.8,
        "url": "https://www.suse.com/de-de/support/kb/doc/?id=7022107"
      },
      {
        "trust": 0.8,
        "url": "https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---wpa-and-wpa2-vulnerabilities/"
      },
      {
        "trust": 0.8,
        "url": "http://www.slackware.com/changelog/stable.php?cpu=x86_64"
      },
      {
        "trust": 0.8,
        "url": "https://community.sophos.com/kb/en-us/127658"
      },
      {
        "trust": 0.8,
        "url": "https://www.toshibacommerce.com/wps/myportal/%21ut/p/a1/rzrnc8igeiz_sw8egqhjcdmmwr8abw2dqcnfoyqotidrrk399uxrrwotuzgws7a87y6z88iuzmcq2u4uwcnlzypjnjj5-exr_wnhya-laxtrid-j3uchdtb8gylmuw6qzgktovtowsrrqlrs6-8dbeqhwc1mykqnlabgdjlf1yjvn7i5af4qtdwsn2tri7j"
      },
      {
        "trust": 0.8,
        "url": "http://www.toshiba-personalstorage.net/en/news/hdd/ot_notice/20171017.htm"
      },
      {
        "trust": 0.8,
        "url": "http://support.toshiba.com/support/staticcontentdetail?contentid=4015875\u0026isfromtoclink=false"
      },
      {
        "trust": 0.8,
        "url": "https://community.ubnt.com/t5/unifi-updates-blog/firmware-3-9-3-7537-for-uap-usw-has-been-released/ba-p/2099365"
      },
      {
        "trust": 0.8,
        "url": "https://usn.ubuntu.com/usn/usn-3455-1/"
      },
      {
        "trust": 0.8,
        "url": "http://en.miui.com/thread-954223-1-1.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.zebra.com/content/dam/zebra_new_ia/en-us/support-and-downloads/lifeguard-security/krack-security-bulletin.pdf"
      },
      {
        "trust": 0.8,
        "url": "http://www.zyxel.com/support/announcement_wpa2_key_management.shtml"
      },
      {
        "trust": 0.8,
        "url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventsubmit_dogoviewsolutiondetails=\u0026solutionid=sk120938"
      },
      {
        "trust": 0.8,
        "url": "https://community.rsa.com/docs/doc-84103"
      },
      {
        "trust": 0.8,
        "url": "https://support.f5.com/csp/article/k23642330"
      },
      {
        "trust": 0.8,
        "url": "https://forum.mikrotik.com/viewtopic.php?f=21\u0026t=126695"
      },
      {
        "trust": 0.8,
        "url": "https://community.linksys.com/t5/wireless-routers/krack-vulnerability/td-p/1218573"
      },
      {
        "trust": 0.8,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-318-02a"
      },
      {
        "trust": 0.8,
        "url": "https://www.ipa.go.jp/security/ciadr/vul/20171017_wpa2.html"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/vu/jvnvu90609033/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.kb.cert.org/vuls/id/cheu-aqnmyp"
      },
      {
        "trust": 0.6,
        "url": "https://www.kb.cert.org/vuls/id/228519/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.4125/"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13078"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13082"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13087"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13086"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13077"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13080"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13077"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13078"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13080"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13082"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13086"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13087"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-13088"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13081"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13079"
      },
      {
        "trust": 0.3,
        "url": "https://github.com/stevenhoneyman/wpa_gui/tree/master/wpa_supplicant-2.4"
      },
      {
        "trust": 0.3,
        "url": "http://www.wi-fi.org/index.php"
      },
      {
        "trust": 0.3,
        "url": "https://support.apple.com/en-ie/ht208847"
      },
      {
        "trust": 0.3,
        "url": "https://support.apple.com/en-in/ht208334"
      },
      {
        "trust": 0.3,
        "url": "https://support.apple.com/en-in/ht208327"
      },
      {
        "trust": 0.3,
        "url": "https://support.apple.com/en-in/ht208325"
      },
      {
        "trust": 0.3,
        "url": "https://lists.apple.com/archives/security-announce/2017/dec/msg00009.html"
      },
      {
        "trust": 0.3,
        "url": "https://lists.apple.com/archives/security-announce/2017/dec/msg00008.html"
      },
      {
        "trust": 0.3,
        "url": "https://lists.apple.com/archives/security-announce/2018/jul/msg00000.html"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2017-13079"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2017-13081"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2017-13084"
      },
      {
        "trust": 0.3,
        "url": "http://docs.fortinet.com/uploaded/files/3961/fortiap-v5.6.1-release-notes.pdf"
      },
      {
        "trust": 0.3,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-299-02"
      },
      {
        "trust": 0.3,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-318-02"
      },
      {
        "trust": 0.3,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-325-01"
      },
      {
        "trust": 0.3,
        "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/errata/rhsa-2017:2911"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/330.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/kristate/krackinfo"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.1,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.1,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4476"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4477"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.5"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu9.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.2"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13078"
      },
      {
        "trust": 0.1,
        "url": "http://slackware.com"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13080"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13082"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13077"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13087"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13081"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13084"
      },
      {
        "trust": 0.1,
        "url": "http://slackware.com/gpg-key"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13086"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13079"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-13084"
      },
      {
        "trust": 0.1,
        "url": "http://osuosl.org)"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-17:07/wpa-10.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-17:07.wpa.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.krackattacks.com/\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-17:07/wpa-11.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-17:07/wpa-11.patch"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-17:07/wpa-10.patch"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt\u003e"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "db": "BID",
        "id": "101274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "PACKETSTORM",
        "id": "144652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144630"
      },
      {
        "db": "PACKETSTORM",
        "id": "144632"
      },
      {
        "db": "PACKETSTORM",
        "id": "144663"
      },
      {
        "db": "PACKETSTORM",
        "id": "144669"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "db": "BID",
        "id": "101274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "db": "PACKETSTORM",
        "id": "144652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144630"
      },
      {
        "db": "PACKETSTORM",
        "id": "144632"
      },
      {
        "db": "PACKETSTORM",
        "id": "144663"
      },
      {
        "db": "PACKETSTORM",
        "id": "144669"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-10-17T00:00:00",
        "db": "IVD",
        "id": "b8631bf1-6bd8-4549-b275-107397f54fc7"
      },
      {
        "date": "2017-10-16T00:00:00",
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "date": "2017-10-17T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "date": "2017-10-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "date": "2017-10-16T00:00:00",
        "db": "BID",
        "id": "101274"
      },
      {
        "date": "2017-11-06T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "date": "2017-10-17T16:52:00",
        "db": "PACKETSTORM",
        "id": "144652"
      },
      {
        "date": "2017-10-16T13:49:34",
        "db": "PACKETSTORM",
        "id": "144630"
      },
      {
        "date": "2017-10-16T23:23:00",
        "db": "PACKETSTORM",
        "id": "144632"
      },
      {
        "date": "2017-10-18T20:44:00",
        "db": "PACKETSTORM",
        "id": "144663"
      },
      {
        "date": "2017-10-19T14:28:55",
        "db": "PACKETSTORM",
        "id": "144669"
      },
      {
        "date": "2017-10-17T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "date": "2017-10-17T13:29:00.630000",
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-11-16T00:00:00",
        "db": "CERT/CC",
        "id": "VU#228519"
      },
      {
        "date": "2017-10-17T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2017-30397"
      },
      {
        "date": "2019-10-03T00:00:00",
        "db": "VULMON",
        "id": "CVE-2017-13088"
      },
      {
        "date": "2019-02-21T09:00:00",
        "db": "BID",
        "id": "101274"
      },
      {
        "date": "2019-02-01T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-009179"
      },
      {
        "date": "2020-11-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      },
      {
        "date": "2025-04-20T01:37:25.860000",
        "db": "NVD",
        "id": "CVE-2017-13088"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote or local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Wi-Fi Protected Access (WPA) handshake traffic can be manipulated to induce nonce and session key reuse",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#228519"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "security feature problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201710-389"
      }
    ],
    "trust": 0.6
  }
}

FKIE_CVE-2017-13088

Vulnerability from fkie_nvd - Published: 2017-10-17 13:29 - Updated: 2025-04-20 01:37

Severity ?

5.3 (Medium) - CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Summary

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

References

URL	Tags
cret@cert.org	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html	Third Party Advisory
cret@cert.org	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html	Third Party Advisory
cret@cert.org	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html	Third Party Advisory
cret@cert.org	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt	Third Party Advisory
cret@cert.org	http://www.debian.org/security/2017/dsa-3999	Third Party Advisory
cret@cert.org	http://www.kb.cert.org/vuls/id/228519	Third Party Advisory, US Government Resource
cret@cert.org	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
cret@cert.org	http://www.securityfocus.com/bid/101274	Third Party Advisory, VDB Entry
cret@cert.org	http://www.securitytracker.com/id/1039573	Third Party Advisory, VDB Entry
cret@cert.org	http://www.securitytracker.com/id/1039576	Third Party Advisory, VDB Entry
cret@cert.org	http://www.securitytracker.com/id/1039577	Third Party Advisory, VDB Entry
cret@cert.org	http://www.securitytracker.com/id/1039578	Third Party Advisory, VDB Entry
cret@cert.org	http://www.securitytracker.com/id/1039581	Third Party Advisory, VDB Entry
cret@cert.org	http://www.ubuntu.com/usn/USN-3455-1	Third Party Advisory
cret@cert.org	https://access.redhat.com/errata/RHSA-2017:2907	Third Party Advisory
cret@cert.org	https://access.redhat.com/security/vulnerabilities/kracks	Third Party Advisory
cret@cert.org	https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
cret@cert.org	https://cert.vde.com/en-us/advisories/vde-2017-005
cret@cert.org	https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc	Third Party Advisory
cret@cert.org	https://security.gentoo.org/glsa/201711-03
cret@cert.org	https://source.android.com/security/bulletin/2017-11-01
cret@cert.org	https://support.lenovo.com/us/en/product_security/LEN-17420	Third Party Advisory
cret@cert.org	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa	Third Party Advisory
cret@cert.org	https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt	Third Party Advisory
cret@cert.org	https://www.krackattacks.com/	Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2017/dsa-3999	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/228519	Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/101274	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1039573	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1039576	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1039577	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1039578	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1039581	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-3455-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2907	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/security/vulnerabilities/kracks	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
af854a3a-2127-422b-91ae-364da2661108	https://cert.vde.com/en-us/advisories/vde-2017-005
af854a3a-2127-422b-91ae-364da2661108	https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201711-03
af854a3a-2127-422b-91ae-364da2661108	https://source.android.com/security/bulletin/2017-11-01
af854a3a-2127-422b-91ae-364da2661108	https://support.lenovo.com/us/en/product_security/LEN-17420	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.krackattacks.com/	Technical Description, Third Party Advisory

Impacted products

Vendor	Product	Version
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	17.04
debian	debian_linux	8.0
debian	debian_linux	9.0
freebsd	freebsd	*
freebsd	freebsd	10
freebsd	freebsd	10.4
freebsd	freebsd	11
freebsd	freebsd	11.1
opensuse	leap	42.2
opensuse	leap	42.3
redhat	enterprise_linux_desktop	7
redhat	enterprise_linux_server	7
w1.fi	hostapd	0.2.4
w1.fi	hostapd	0.2.5
w1.fi	hostapd	0.2.6
w1.fi	hostapd	0.2.8
w1.fi	hostapd	0.3.7
w1.fi	hostapd	0.3.9
w1.fi	hostapd	0.3.10
w1.fi	hostapd	0.3.11
w1.fi	hostapd	0.4.7
w1.fi	hostapd	0.4.8
w1.fi	hostapd	0.4.9
w1.fi	hostapd	0.4.10
w1.fi	hostapd	0.4.11
w1.fi	hostapd	0.5.7
w1.fi	hostapd	0.5.8
w1.fi	hostapd	0.5.9
w1.fi	hostapd	0.5.10
w1.fi	hostapd	0.5.11
w1.fi	hostapd	0.6.8
w1.fi	hostapd	0.6.9
w1.fi	hostapd	0.6.10
w1.fi	hostapd	0.7.3
w1.fi	hostapd	1.0
w1.fi	hostapd	1.1
w1.fi	hostapd	2.0
w1.fi	hostapd	2.1
w1.fi	hostapd	2.2
w1.fi	hostapd	2.3
w1.fi	hostapd	2.4
w1.fi	hostapd	2.5
w1.fi	hostapd	2.6
w1.fi	wpa_supplicant	0.2.4
w1.fi	wpa_supplicant	0.2.5
w1.fi	wpa_supplicant	0.2.6
w1.fi	wpa_supplicant	0.2.7
w1.fi	wpa_supplicant	0.2.8
w1.fi	wpa_supplicant	0.3.7
w1.fi	wpa_supplicant	0.3.8
w1.fi	wpa_supplicant	0.3.9
w1.fi	wpa_supplicant	0.3.10
w1.fi	wpa_supplicant	0.3.11
w1.fi	wpa_supplicant	0.4.7
w1.fi	wpa_supplicant	0.4.8
w1.fi	wpa_supplicant	0.4.9
w1.fi	wpa_supplicant	0.4.10
w1.fi	wpa_supplicant	0.4.11
w1.fi	wpa_supplicant	0.5.7
w1.fi	wpa_supplicant	0.5.8
w1.fi	wpa_supplicant	0.5.9
w1.fi	wpa_supplicant	0.5.10
w1.fi	wpa_supplicant	0.5.11
w1.fi	wpa_supplicant	0.6.8
w1.fi	wpa_supplicant	0.6.9
w1.fi	wpa_supplicant	0.6.10
w1.fi	wpa_supplicant	0.7.3
w1.fi	wpa_supplicant	1.0
w1.fi	wpa_supplicant	1.1
w1.fi	wpa_supplicant	2.0
w1.fi	wpa_supplicant	2.1
w1.fi	wpa_supplicant	2.2
w1.fi	wpa_supplicant	2.3
w1.fi	wpa_supplicant	2.4
w1.fi	wpa_supplicant	2.5
w1.fi	wpa_supplicant	2.6
suse	linux_enterprise_desktop	12
suse	linux_enterprise_desktop	12
suse	linux_enterprise_point_of_sale	11
suse	linux_enterprise_server	11
suse	linux_enterprise_server	11
suse	linux_enterprise_server	12
suse	openstack_cloud	6

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "588D4F37-0A56-47A4-B710-4D5F3D214FB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9EC02F3-3905-460D-8949-3B26394215CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
              "matchCriteriaId": "4195DB45-CF5A-4FA6-BF58-BAF77EE555C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD5B9266-A927-4F62-8742-721CE9A4C4C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
              "matchCriteriaId": "602D3280-2974-4809-BE70-1EA9437AEBF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5753931-556B-4EEC-B510-751BA3613CE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
              "matchCriteriaId": "2095C863-1FB0-4016-81FF-3CAB44E77FD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC7AAFCB-AB64-4B39-87AA-936E386A82C2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6454F0F-6CC1-4EA2-8D7C-51709FD7F318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFCB5512-B60E-48D7-B136-ADF19E5E74BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EB1420D-5D05-4BFC-8AF7-2AB00B76148B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "21324D89-B634-4D6B-987B-4AD29079373D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AB43314-8725-48A0-8902-864567808AD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2AA3D0E-C483-4575-8209-DE643A3FEC7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0DE22EA-D5FA-4477-A3AD-F10455D8DB9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "1212B910-E4A5-47A1-A263-4E1C13CF3EFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9A6A99E-5129-4E8D-A0AF-61755BDA3565",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC42F782-63CB-4960-BF65-4856776CFBE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "212B0353-4AEF-4861-A054-6193CAA05390",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E702507-5BA0-4A12-80C6-A729F32A6A80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "24810936-DABC-485D-B952-22F16C3016FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AF46881-4484-4ABB-AC0C-152664E2CD6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "880CBDD7-BFEC-48F6-8C4C-D300143B6571",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "B29CCA41-5784-48C3-B9ED-6B1FF063FB1C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "37B9643D-4046-4034-8B68-18F59154CD66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "681C458F-D1BD-48DA-86C7-BA714F5AA9B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "4057F722-1A8E-4D75-B049-E3632AC8EF65",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1F53FDB-7136-444E-AB03-9D8A6A31E249",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "63AB46C0-2F00-4805-84A9-323BA4E594DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "06119A43-B1CA-4021-87D2-C67BE6125423",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "768D16AF-3A8B-47DD-A499-948A73062AE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BECC3EF-2777-4FF9-9750-93D1245A9247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2D07095-6331-4079-BD86-E414CEE35624",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "61CDB3D2-F6C3-43CF-ACE8-95E96DF02293",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CCD4904-08CA-45C7-A3D0-90BE5C88CDBF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B4681FC-44F4-4E86-8431-8EDAD65492D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC6FB535-AFFF-4083-AF1D-9E1ED504158F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A74105F9-E729-47BA-A96F-4D15947B673A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F5F7411-0B32-4041-8235-2B1AEC186FF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9191D783-4390-4603-9C4D-F673270E63C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E36F3308-EABA-451F-90E1-65919450A809",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "44F6680B-7015-4EB0-AABC-A4DD50894CD5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CAFF5E3-EA27-4688-87AD-1648003D3D1C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "081B4F7E-D7D0-452A-AAEB-0378EB6E7BC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E00A5B5-81D8-4BF3-B857-028D7D06CA5E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "476C3ED0-B77C-490F-AF1E-BC4C7D52D818",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B1972B5-F896-419C-9FFA-FB583B114B8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2E84533-EB76-4A8F-90ED-E9342EAF3427",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5AE0623-87CB-4CEF-BD3B-6BCF676031CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "905B55A4-2488-44D1-991F-C142C3527F18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDD1984D-BCC2-4FC6-B02E-226B1D8BC6F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "90102D17-8D03-4F59-811B-FBFB98D627C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9381F69-1633-44DD-967F-D29587B67079",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "9169BDAC-6207-4B6A-8EF3-D52DED1A9311",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FBCD6EA-4E6D-4C6E-97E5-B64F6CB90639",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "62E17E03-53C6-4E74-91A8-4C4363666291",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4C6FEDE-B0E9-479A-9185-48D62DBC91FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "643762E2-969E-4531-B79E-961697E5DA8A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "627AD871-2091-48E9-B801-3E3D5CF8E594",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BC691E5-6265-4FAB-9ACA-C65EB99AFA47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "4701BF31-B3FC-4590-9787-3BA94ECB8D54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DB96005-E214-4C60-865E-B693115527D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4CFF264-2315-43CE-B2A6-4234B394854C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3EF53AD-F985-446E-89B8-4BFECE00AD63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A11DBFA-9F0E-4358-8541-E5371C11FE80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "738AEB08-FF7D-4DC3-AB14-B8F2B9474810",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E8C5523-16E4-417E-A159-F5D0F9E83C5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AE48919-35E0-4C9A-BAEB-A6402FA7BD4E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB93C2FC-6913-448E-8B93-EEB2229EC86C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ECA3172-7088-4B5E-923D-37B155729BD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "48FD6B1B-7555-449D-9CCB-1487FAEE8098",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "9726F4DE-8037-49AD-A092-7EF9D5BF99EC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "57CFAD92-EECD-417D-ADDB-8178C320B204",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "C1DCD75C-9775-4922-8A44-C4707C640946",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "086BF5C5-255C-4E2E-83D3-A8B83AED6B60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
              "matchCriteriaId": "91F8AC0A-13B4-4DF0-B40D-8756ACCDB4C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
              "matchCriteriaId": "B2F3699A-38E4-4E9D-9414-411F71D9E371",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
              "matchCriteriaId": "07E4AF6E-9BA4-4542-8F9F-6BA723F7A64D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients."
    },
    {
      "lang": "es",
      "value": "Wi-Fi Protected Access (WPA y WPA2) que soporte IEEE 802.11v permite la reinstalaci\u00f3n de la clave temporal GTK (Integrity Group Temporal Key) cuando se procesa un frame Wireless Network Management (WNM) Sleep Mode Response, haciendo que un atacante que se sit\u00fae dentro del radio reproduzca frames desde los puntos de acceso hasta los clientes."
    }
  ],
  "id": "CVE-2017-13088",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.9,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:A/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 5.5,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-10-17T13:29:00.630",
  "references": [
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2017/dsa-3999"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/228519"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/101274"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039573"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039576"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039577"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039578"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039581"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-3455-1"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:2907"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/security/vulnerabilities/kracks"
    },
    {
      "source": "cret@cert.org",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf"
    },
    {
      "source": "cret@cert.org",
      "url": "https://cert.vde.com/en-us/advisories/vde-2017-005"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc"
    },
    {
      "source": "cret@cert.org",
      "url": "https://security.gentoo.org/glsa/201711-03"
    },
    {
      "source": "cret@cert.org",
      "url": "https://source.android.com/security/bulletin/2017-11-01"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-17420"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Technical Description",
        "Third Party Advisory"
      ],
      "url": "https://www.krackattacks.com/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2017/dsa-3999"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/228519"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/101274"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039573"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039576"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039577"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039578"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039581"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-3455-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:2907"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/security/vulnerabilities/kracks"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://cert.vde.com/en-us/advisories/vde-2017-005"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/201711-03"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://source.android.com/security/bulletin/2017-11-01"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-17420"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Technical Description",
        "Third Party Advisory"
      ],
      "url": "https://www.krackattacks.com/"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-323"
        }
      ],
      "source": "cret@cert.org",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-330"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

SUSE-SU-2017:2752-1

Vulnerability from csaf_suse - Published: 2017-10-17 15:04 - Updated: 2017-10-17 15:04

Summary

Security update for wpa_supplicant

Severity

Important

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the following issues: - Several vulnerabilities in standard conforming implementations of the WPA2 protocol have been discovered and published under the code name KRACK. This update remedies those issues in a backwards compatible manner, i.e. the updated wpa_supplicant can interface properly with both vulnerable and patched implementations of WPA2, but an attacker won't be able to exploit the KRACK weaknesses in those connections anymore even if the other party is still vulnerable. [bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088]

Patchnames: sleposp3-wpa_supplicant-13318,slessp3-wpa_supplicant-13318,slessp4-wpa_supplicant-13318

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/1056061	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\n- Several vulnerabilities in standard conforming implementations of the WPA2\n  protocol have been discovered and published under the code name KRACK. This\n  update remedies those issues in a backwards compatible manner, i.e. the\n  updated wpa_supplicant can interface properly with both vulnerable and\n  patched implementations of WPA2, but an attacker won\u0027t be able to exploit the\n  KRACK weaknesses in those connections anymore even if the other party is\n  still vulnerable. [bsc#1056061, CVE-2017-13078, CVE-2017-13079,\n  CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088]\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sleposp3-wpa_supplicant-13318,slessp3-wpa_supplicant-13318,slessp4-wpa_supplicant-13318",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_2752-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:2752-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172752-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:2752-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-October/003304.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1056061",
        "url": "https://bugzilla.suse.com/1056061"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2017-10-17T15:04:39Z",
      "generator": {
        "date": "2017-10-17T15:04:39Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:2752-1",
      "initial_release_date": "2017-10-17T15:04:39Z",
      "revision_history": [
        {
          "date": "2017-10-17T15:04:39Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-0.7.1-6.18.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-0.7.1-6.18.3.1.i586",
                  "product_id": "wpa_supplicant-0.7.1-6.18.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-0.7.1-6.18.3.1.ia64",
                "product": {
                  "name": "wpa_supplicant-0.7.1-6.18.3.1.ia64",
                  "product_id": "wpa_supplicant-0.7.1-6.18.3.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-0.7.1-6.18.3.1.ppc64",
                "product": {
                  "name": "wpa_supplicant-0.7.1-6.18.3.1.ppc64",
                  "product_id": "wpa_supplicant-0.7.1-6.18.3.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-0.7.1-6.18.3.1.s390x",
                "product": {
                  "name": "wpa_supplicant-0.7.1-6.18.3.1.s390x",
                  "product_id": "wpa_supplicant-0.7.1-6.18.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-0.7.1-6.18.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-0.7.1-6.18.3.1.x86_64",
                  "product_id": "wpa_supplicant-0.7.1-6.18.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-pos:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-0.7.1-6.18.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-0.7.1-6.18.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T15:04:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T15:04:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T15:04:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T15:04:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T15:04:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.18.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T15:04:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    }
  ]
}

SUSE-SU-2020:3424-1

Vulnerability from csaf_suse - Published: 2020-11-19 15:11 - Updated: 2020-11-19 15:11

Summary

Security update for wpa_supplicant

Severity

Moderate

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the following issues: wpa_supplicant was updated to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Limit P2P_DEVICE name to appropriate ifname size. - Enable SAE support(jsc#SLE-14992). - CVE-2019-16275: AP mode PMF disconnection protection bypass (bsc#1150934) - Fix wicked wlan (bsc#1156920) - Still include fi.epitest.hostap.WPASupplicant.service (bsc#1167331) - Change wpa_supplicant.service to ensure wpa_supplicant gets started before network. Fix WLAN config on boot with wicked. (bsc#1166933) - Adjust the service to start after network.target wrt bsc#1165266 - Using O_WRONLY flag [http://w1.fi/security/2015-5/] (CVE-2015-8041)

Patchnames: SUSE-2020-3424,SUSE-SLE-SERVER-12-SP5-2020-3424

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2015-8041

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13077

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13082

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13086

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2018-14526

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-11555

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-13377

5.9 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-16275

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9494

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9495

6.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9497

3.1 (Low)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9498

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9499

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/1131644	self
	https://bugzilla.suse.com/1131868	self
	https://bugzilla.suse.com/1131870	self
	https://bugzilla.suse.com/1131871	self
	https://bugzilla.suse.com/1131872	self
	https://bugzilla.suse.com/1131874	self
	https://bugzilla.suse.com/1133640	self
	https://bugzilla.suse.com/1144443	self
	https://bugzilla.suse.com/1150934	self
	https://bugzilla.suse.com/1156920	self
	https://bugzilla.suse.com/1165266	self
	https://bugzilla.suse.com/1166933	self
	https://bugzilla.suse.com/1167331	self
	https://www.suse.com/security/cve/CVE-2015-8041/	self
	https://www.suse.com/security/cve/CVE-2017-13077/	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13082/	self
	https://www.suse.com/security/cve/CVE-2017-13086/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2018-14526/	self
	https://www.suse.com/security/cve/CVE-2019-11555/	self
	https://www.suse.com/security/cve/CVE-2019-13377/	self
	https://www.suse.com/security/cve/CVE-2019-16275/	self
	https://www.suse.com/security/cve/CVE-2019-9494/	self
	https://www.suse.com/security/cve/CVE-2019-9495/	self
	https://www.suse.com/security/cve/CVE-2019-9497/	self
	https://www.suse.com/security/cve/CVE-2019-9498/	self
	https://www.suse.com/security/cve/CVE-2019-9499/	self
	https://www.suse.com/security/cve/CVE-2015-8041	external
	https://bugzilla.suse.com/937419	external
	https://www.suse.com/security/cve/CVE-2017-13077	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063963	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13082	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13086	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2018-14526	external
	https://bugzilla.suse.com/1104205	external
	https://www.suse.com/security/cve/CVE-2019-11555	external
	https://bugzilla.suse.com/1133640	external
	https://www.suse.com/security/cve/CVE-2019-13377	external
	https://bugzilla.suse.com/1144443	external
	https://www.suse.com/security/cve/CVE-2019-16275	external
	https://bugzilla.suse.com/1150934	external
	https://www.suse.com/security/cve/CVE-2019-9494	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131868	external
	https://bugzilla.suse.com/1194732	external
	https://www.suse.com/security/cve/CVE-2019-9495	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131870	external
	https://bugzilla.suse.com/1194733	external
	https://www.suse.com/security/cve/CVE-2019-9497	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9498	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9499	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\nwpa_supplicant was updated to 2.9 release:\n\n   * SAE changes\n     - disable use of groups using Brainpool curves\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * EAP-pwd changes\n     - disable use of groups using Brainpool curves\n     - allow the set of groups to be configured (eap_pwd_groups)\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * fixed FT-EAP initial mobility domain association using PMKSA caching\n     (disabled by default for backwards compatibility; can be enabled\n     with ft_eap_pmksa_caching=1)\n   * fixed a regression in OpenSSL 1.1+ engine loading\n   * added validation of RSNE in (Re)Association Response frames\n   * fixed DPP bootstrapping URI parser of channel list\n   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n   * extended ca_cert_blob to support PEM format\n   * improved robustness of P2P Action frame scheduling\n   * added support for EAP-SIM/AKA using anonymous@realm identity\n   * fixed Hotspot 2.0 credential selection based on roaming consortium\n     to ignore credentials without a specific EAP method\n   * added experimental support for EAP-TEAP peer (RFC 7170)\n   * added experimental support for EAP-TLS peer with TLS v1.3\n   * fixed a regression in WMM parameter configuration for a TDLS peer\n   * fixed a regression in operation with drivers that offload 802.1X\n     4-way handshake\n   * fixed an ECDH operation corner case with OpenSSL\n   * SAE changes\n     - added support for SAE Password Identifier\n     - changed default configuration to enable only groups 19, 20, 21\n       (i.e., disable groups 25 and 26) and disable all unsuitable groups\n       completely based on REVmd changes\n     - do not regenerate PWE unnecessarily when the AP uses the\n       anti-clogging token mechanisms\n     - fixed some association cases where both SAE and FT-SAE were enabled\n       on both the station and the selected AP\n     - started to prefer FT-SAE over SAE AKM if both are enabled\n     - started to prefer FT-SAE over FT-PSK if both are enabled\n     - fixed FT-SAE when SAE PMKSA caching is used\n     - reject use of unsuitable groups based on new implementation guidance\n       in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n       groups with prime \u003e= 256)\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n   * EAP-pwd changes\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n     - verify server scalar/element\n       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n     - fix message reassembly issue with unexpected fragment\n       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n     - enforce rand,mask generation rules more strictly\n     - fix a memory leak in PWE derivation\n     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n       27)\n     - SAE/EAP-pwd side-channel attack update\n       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n   * Hotspot 2.0 changes\n     - do not indicate release number that is higher than the one\n       AP supports\n     - added support for release number 3\n     - enable PMF automatically for network profiles created from\n       credentials\n   * fixed OWE network profile saving\n   * fixed DPP network profile saving\n   * added support for RSN operating channel validation\n     (CONFIG_OCV=y and network profile parameter ocv=1)\n   * added Multi-AP backhaul STA support\n   * fixed build with LibreSSL\n   * number of MKA/MACsec fixes and extensions\n   * extended domain_match and domain_suffix_match to allow list of values\n   * fixed dNSName matching in domain_match and domain_suffix_match when\n     using wolfSSL\n   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n     are enabled\n   * extended nl80211 Connect and external authentication to support\n     SAE, FT-SAE, FT-EAP-SHA384\n   * fixed KEK2 derivation for FILS+FT\n   * extended client_cert file to allow loading of a chain of PEM\n     encoded certificates\n   * extended beacon reporting functionality\n   * extended D-Bus interface with number of new properties\n   * fixed a regression in FT-over-DS with mac80211-based drivers\n   * OpenSSL: allow systemwide policies to be overridden\n   * extended driver flags indication for separate 802.1X and PSK\n     4-way handshake offload capability\n   * added support for random P2P Device/Interface Address use\n   * extended PEAP to derive EMSK to enable use with ERP/FILS\n   * extended WPS to allow SAE configuration to be added automatically\n     for PSK (wps_cred_add_sae=1)\n   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n   * extended domain_match and domain_suffix_match to allow list of values\n   * added a RSN workaround for misbehaving PMF APs that advertise\n     IGTK/BIP KeyID using incorrect byte order\n   * fixed PTK rekeying with FILS and FT\n   * fixed WPA packet number reuse with replayed messages and key\n     reinstallation\n     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n     [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n   * added support for FILS (IEEE 802.11ai) shared key authentication\n   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n     and transition mode defined by WFA)\n   * added support for DPP (Wi-Fi Device Provisioning Protocol)\n   * added support for RSA 3k key case with Suite B 192-bit level\n   * fixed Suite B PMKSA caching not to update PMKID during each 4-way\n     handshake\n   * fixed EAP-pwd pre-processing with PasswordHashHash\n   * added EAP-pwd client support for salted passwords\n   * fixed a regression in TDLS prohibited bit validation\n   * started to use estimated throughput to avoid undesired signal\n     strength based roaming decision\n   * MACsec/MKA:\n     - new macsec_linux driver interface support for the Linux\n       kernel macsec module\n     - number of fixes and extensions\n   * added support for external persistent storage of PMKSA cache\n     (PMKSA_GET/PMKSA_ADD control interface commands; and\n      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n   * fixed mesh channel configuration pri/sec switch case\n   * added support for beacon report\n   * large number of other fixes, cleanup, and extensions\n   * added support for randomizing local address for GAS queries\n     (gas_rand_mac_addr parameter)\n   * fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n   * added option for using random WPS UUID (auto_uuid=1)\n   * added SHA256-hash support for OCSP certificate matching\n   * fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n   * fixed a regression in RSN pre-authentication candidate selection\n   * added option to configure allowed group management cipher suites\n     (group_mgmt network profile parameter)\n   * removed all PeerKey functionality\n   * fixed nl80211 AP and mesh mode configuration regression with\n     Linux 4.15 and newer\n   * added ap_isolate configuration option for AP mode\n   * added support for nl80211 to offload 4-way handshake into the driver\n   * added support for using wolfSSL cryptographic library\n   * SAE\n     - added support for configuring SAE password separately of the\n       WPA2 PSK/passphrase\n     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n       for SAE;\n       note: this is not backwards compatible, i.e., both the AP and\n       station side implementations will need to be update at the same\n       time to maintain interoperability\n     - added support for Password Identifier\n     - fixed FT-SAE PMKID matching\n   * Hotspot 2.0\n     - added support for fetching of Operator Icon Metadata ANQP-element\n     - added support for Roaming Consortium Selection element\n     - added support for Terms and Conditions\n     - added support for OSEN connection in a shared RSN BSS\n     - added support for fetching Venue URL information\n   * added support for using OpenSSL 1.1.1\n   * FT\n     - disabled PMKSA caching with FT since it is not fully functional\n     - added support for SHA384 based AKM\n     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n     - fixed additional IE inclusion in Reassociation Request frame when\n       using FT protocol\n\n- Limit P2P_DEVICE name to appropriate ifname size.\n- Enable SAE support(jsc#SLE-14992).\n- CVE-2019-16275: AP mode PMF disconnection protection bypass (bsc#1150934)\n- Fix wicked wlan (bsc#1156920)\n- Still include fi.epitest.hostap.WPASupplicant.service (bsc#1167331)\n- Change wpa_supplicant.service to ensure wpa_supplicant gets started before\n  network. Fix WLAN config on boot with wicked. (bsc#1166933)\n- Adjust the service to start after network.target wrt bsc#1165266\n\n- Using O_WRONLY flag [http://w1.fi/security/2015-5/] (CVE-2015-8041)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-3424,SUSE-SLE-SERVER-12-SP5-2020-3424",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3424-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:3424-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20203424-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:3424-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150934",
        "url": "https://bugzilla.suse.com/1150934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165266",
        "url": "https://bugzilla.suse.com/1165266"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16275 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2020-11-19T15:11:57Z",
      "generator": {
        "date": "2020-11-19T15:11:57Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:3424-1",
      "initial_release_date": "2020-11-19T15:11:57Z",
      "revision_history": [
        {
          "date": "2020-11-19T15:11:57Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-23.3.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-2.9-23.3.1.aarch64",
                  "product_id": "wpa_supplicant-2.9-23.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-23.3.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-23.3.1.aarch64",
                  "product_id": "wpa_supplicant-gui-2.9-23.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-23.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-23.3.1.i586",
                  "product_id": "wpa_supplicant-2.9-23.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-23.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-23.3.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-23.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-23.3.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-2.9-23.3.1.ppc64le",
                  "product_id": "wpa_supplicant-2.9-23.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-23.3.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-23.3.1.ppc64le",
                  "product_id": "wpa_supplicant-gui-2.9-23.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-23.3.1.s390",
                "product": {
                  "name": "wpa_supplicant-2.9-23.3.1.s390",
                  "product_id": "wpa_supplicant-2.9-23.3.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-23.3.1.s390",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-23.3.1.s390",
                  "product_id": "wpa_supplicant-gui-2.9-23.3.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-23.3.1.s390x",
                "product": {
                  "name": "wpa_supplicant-2.9-23.3.1.s390x",
                  "product_id": "wpa_supplicant-2.9-23.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-23.3.1.s390x",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-23.3.1.s390x",
                  "product_id": "wpa_supplicant-gui-2.9-23.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-23.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-23.3.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-23.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-23.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-23.3.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-23.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-23.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-23.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-16275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16275",
          "url": "https://www.suse.com/security/cve/CVE-2019-16275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150934 for CVE-2019-16275",
          "url": "https://bugzilla.suse.com/1150934"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16275"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T15:11:57Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    }
  ]
}

SUSE-SU-2017:2745-1

Vulnerability from csaf_suse - Published: 2017-10-17 12:17 - Updated: 2017-10-17 12:17

Summary

Security update for wpa_supplicant

Severity

Important

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the security issues: - Several vulnerabilities in standard conforming implementations of the WPA2 protocol have been discovered and published under the code name KRACK. This update remedies those issues in a backwards compatible manner, i.e. the updated wpa_supplicant can interface properly with both vulnerable and patched implementations of WPA2, but an attacker won't be able to exploit the KRACK weaknesses in those connections anymore even if the other party is still vulnerable. [bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088]

Patchnames: SUSE-OpenStack-Cloud-6-2017-1705,SUSE-SLE-DESKTOP-12-SP2-2017-1705,SUSE-SLE-DESKTOP-12-SP3-2017-1705,SUSE-SLE-RPI-12-SP2-2017-1705,SUSE-SLE-SAP-12-SP1-2017-1705,SUSE-SLE-SERVER-12-2017-1705,SUSE-SLE-SERVER-12-SP1-2017-1705,SUSE-SLE-SERVER-12-SP2-2017-1705,SUSE-SLE-SERVER-12-SP3-2017-1705

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/1056061	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the security issues:\n\n- Several vulnerabilities in standard conforming implementations of the WPA2\n  protocol have been discovered and published under the code name KRACK. This\n  update remedies those issues in a backwards compatible manner, i.e. the\n  updated wpa_supplicant can interface properly with both vulnerable and\n  patched implementations of WPA2, but an attacker won\u0027t be able to exploit the\n  KRACK weaknesses in those connections anymore even if the other party is\n  still vulnerable. [bsc#1056061, CVE-2017-13078, CVE-2017-13079,\n  CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088]\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-OpenStack-Cloud-6-2017-1705,SUSE-SLE-DESKTOP-12-SP2-2017-1705,SUSE-SLE-DESKTOP-12-SP3-2017-1705,SUSE-SLE-RPI-12-SP2-2017-1705,SUSE-SLE-SAP-12-SP1-2017-1705,SUSE-SLE-SERVER-12-2017-1705,SUSE-SLE-SERVER-12-SP1-2017-1705,SUSE-SLE-SERVER-12-SP2-2017-1705,SUSE-SLE-SERVER-12-SP3-2017-1705",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_2745-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:2745-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172745-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:2745-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-October/003300.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1056061",
        "url": "https://bugzilla.suse.com/1056061"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2017-10-17T12:17:01Z",
      "generator": {
        "date": "2017-10-17T12:17:01Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:2745-1",
      "initial_release_date": "2017-10-17T12:17:01Z",
      "revision_history": [
        {
          "date": "2017-10-17T12:17:01Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.2-15.3.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-2.2-15.3.1.aarch64",
                  "product_id": "wpa_supplicant-2.2-15.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.2-15.3.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-2.2-15.3.1.ppc64le",
                  "product_id": "wpa_supplicant-2.2-15.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.2-15.3.1.s390x",
                "product": {
                  "name": "wpa_supplicant-2.2-15.3.1.s390x",
                  "product_id": "wpa_supplicant-2.2-15.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.2-15.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.2-15.3.1.x86_64",
                  "product_id": "wpa_supplicant-2.2-15.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 6",
                "product": {
                  "name": "SUSE OpenStack Cloud 6",
                  "product_id": "SUSE OpenStack Cloud 6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE OpenStack Cloud 6",
          "product_id": "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.2-15.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.2-15.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T12:17:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T12:17:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T12:17:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T12:17:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T12:17:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
          "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.2-15.3.1.x86_64",
            "SUSE OpenStack Cloud 6:wpa_supplicant-2.2-15.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-10-17T12:17:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    }
  ]
}

SUSE-SU-2020:3380-1

Vulnerability from csaf_suse - Published: 2020-11-19 08:31 - Updated: 2020-11-19 08:31

Summary

Security update for wpa_supplicant

Severity

Moderate

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934). Non-security issues fixed: - Enable SAE support (jsc#SLE-14992). - Limit P2P_DEVICE name to appropriate ifname size. - Fix wicked wlan (bsc#1156920) - Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331) - With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331) - Fix WLAN config on boot with wicked. (bsc#1166933) - Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Changed service-files for start after network (systemd-networkd).

Patchnames: SUSE-2020-3380,SUSE-SLE-Module-Basesystem-15-SP1-2020-3380,SUSE-SLE-Module-Basesystem-15-SP2-2020-3380,SUSE-SLE-Product-HPC-15-2020-3380,SUSE-SLE-Product-SLES-15-2020-3380,SUSE-SLE-Product-SLES_SAP-15-2020-3380

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2015-4141

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-4142

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-4143

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-8041

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13077

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13082

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13086

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2018-14526

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-11555

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-13377

5.9 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-16275

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9494

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9495

6.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9497

3.1 (Low)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9498

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9499

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/1131644	self
	https://bugzilla.suse.com/1131868	self
	https://bugzilla.suse.com/1131870	self
	https://bugzilla.suse.com/1131871	self
	https://bugzilla.suse.com/1131872	self
	https://bugzilla.suse.com/1131874	self
	https://bugzilla.suse.com/1133640	self
	https://bugzilla.suse.com/1144443	self
	https://bugzilla.suse.com/1150934	self
	https://bugzilla.suse.com/1156920	self
	https://bugzilla.suse.com/1166933	self
	https://bugzilla.suse.com/1167331	self
	https://bugzilla.suse.com/930077	self
	https://bugzilla.suse.com/930078	self
	https://bugzilla.suse.com/930079	self
	https://www.suse.com/security/cve/CVE-2015-4141/	self
	https://www.suse.com/security/cve/CVE-2015-4142/	self
	https://www.suse.com/security/cve/CVE-2015-4143/	self
	https://www.suse.com/security/cve/CVE-2015-8041/	self
	https://www.suse.com/security/cve/CVE-2017-13077/	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13082/	self
	https://www.suse.com/security/cve/CVE-2017-13086/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2018-14526/	self
	https://www.suse.com/security/cve/CVE-2019-11555/	self
	https://www.suse.com/security/cve/CVE-2019-13377/	self
	https://www.suse.com/security/cve/CVE-2019-16275/	self
	https://www.suse.com/security/cve/CVE-2019-9494/	self
	https://www.suse.com/security/cve/CVE-2019-9495/	self
	https://www.suse.com/security/cve/CVE-2019-9497/	self
	https://www.suse.com/security/cve/CVE-2019-9498/	self
	https://www.suse.com/security/cve/CVE-2019-9499/	self
	https://www.suse.com/security/cve/CVE-2015-4141	external
	https://bugzilla.suse.com/915323	external
	https://bugzilla.suse.com/930077	external
	https://www.suse.com/security/cve/CVE-2015-4142	external
	https://bugzilla.suse.com/915323	external
	https://bugzilla.suse.com/930078	external
	https://www.suse.com/security/cve/CVE-2015-4143	external
	https://bugzilla.suse.com/930079	external
	https://www.suse.com/security/cve/CVE-2015-8041	external
	https://bugzilla.suse.com/937419	external
	https://www.suse.com/security/cve/CVE-2017-13077	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063963	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13082	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13086	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2018-14526	external
	https://bugzilla.suse.com/1104205	external
	https://www.suse.com/security/cve/CVE-2019-11555	external
	https://bugzilla.suse.com/1133640	external
	https://www.suse.com/security/cve/CVE-2019-13377	external
	https://bugzilla.suse.com/1144443	external
	https://www.suse.com/security/cve/CVE-2019-16275	external
	https://bugzilla.suse.com/1150934	external
	https://www.suse.com/security/cve/CVE-2019-9494	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131868	external
	https://bugzilla.suse.com/1194732	external
	https://www.suse.com/security/cve/CVE-2019-9495	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131870	external
	https://bugzilla.suse.com/1194733	external
	https://www.suse.com/security/cve/CVE-2019-9497	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9498	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9499	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).\n\nNon-security issues fixed:\n\n- Enable SAE support (jsc#SLE-14992).\n- Limit P2P_DEVICE name to appropriate ifname size.\n- Fix wicked wlan (bsc#1156920)\n- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)\n- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)\n- Fix WLAN config on boot with wicked. (bsc#1166933)\n- Update to 2.9 release:\n   * SAE changes\n     - disable use of groups using Brainpool curves\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * EAP-pwd changes\n     - disable use of groups using Brainpool curves\n     - allow the set of groups to be configured (eap_pwd_groups)\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * fixed FT-EAP initial mobility domain association using PMKSA caching\n     (disabled by default for backwards compatibility; can be enabled\n     with ft_eap_pmksa_caching=1)\n   * fixed a regression in OpenSSL 1.1+ engine loading\n   * added validation of RSNE in (Re)Association Response frames\n   * fixed DPP bootstrapping URI parser of channel list\n   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n   * extended ca_cert_blob to support PEM format\n   * improved robustness of P2P Action frame scheduling\n   * added support for EAP-SIM/AKA using anonymous@realm identity\n   * fixed Hotspot 2.0 credential selection based on roaming consortium\n     to ignore credentials without a specific EAP method\n   * added experimental support for EAP-TEAP peer (RFC 7170)\n   * added experimental support for EAP-TLS peer with TLS v1.3\n   * fixed a regression in WMM parameter configuration for a TDLS peer\n   * fixed a regression in operation with drivers that offload 802.1X\n     4-way handshake\n   * fixed an ECDH operation corner case with OpenSSL\n   * SAE changes\n     - added support for SAE Password Identifier\n     - changed default configuration to enable only groups 19, 20, 21\n       (i.e., disable groups 25 and 26) and disable all unsuitable groups\n       completely based on REVmd changes\n     - do not regenerate PWE unnecessarily when the AP uses the\n       anti-clogging token mechanisms\n     - fixed some association cases where both SAE and FT-SAE were enabled\n       on both the station and the selected AP\n     - started to prefer FT-SAE over SAE AKM if both are enabled\n     - started to prefer FT-SAE over FT-PSK if both are enabled\n     - fixed FT-SAE when SAE PMKSA caching is used\n     - reject use of unsuitable groups based on new implementation guidance\n       in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n       groups with prime \u003e= 256)\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n   * EAP-pwd changes\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n     - verify server scalar/element\n       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n     - fix message reassembly issue with unexpected fragment\n       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n     - enforce rand,mask generation rules more strictly\n     - fix a memory leak in PWE derivation\n     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n       27)\n     - SAE/EAP-pwd side-channel attack update\n       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n   * Hotspot 2.0 changes\n     - do not indicate release number that is higher than the one\n       AP supports\n     - added support for release number 3\n     - enable PMF automatically for network profiles created from\n       credentials\n   * fixed OWE network profile saving\n   * fixed DPP network profile saving\n   * added support for RSN operating channel validation\n     (CONFIG_OCV=y and network profile parameter ocv=1)\n   * added Multi-AP backhaul STA support\n   * fixed build with LibreSSL\n   * number of MKA/MACsec fixes and extensions\n   * extended domain_match and domain_suffix_match to allow list of values\n   * fixed dNSName matching in domain_match and domain_suffix_match when\n     using wolfSSL\n   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n     are enabled\n   * extended nl80211 Connect and external authentication to support\n     SAE, FT-SAE, FT-EAP-SHA384\n   * fixed KEK2 derivation for FILS+FT\n   * extended client_cert file to allow loading of a chain of PEM\n     encoded certificates\n   * extended beacon reporting functionality\n   * extended D-Bus interface with number of new properties\n   * fixed a regression in FT-over-DS with mac80211-based drivers\n   * OpenSSL: allow systemwide policies to be overridden\n   * extended driver flags indication for separate 802.1X and PSK\n     4-way handshake offload capability\n   * added support for random P2P Device/Interface Address use\n   * extended PEAP to derive EMSK to enable use with ERP/FILS\n   * extended WPS to allow SAE configuration to be added automatically\n     for PSK (wps_cred_add_sae=1)\n   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n   * extended domain_match and domain_suffix_match to allow list of values\n   * added a RSN workaround for misbehaving PMF APs that advertise\n     IGTK/BIP KeyID using incorrect byte order\n   * fixed PTK rekeying with FILS and FT\n   * fixed WPA packet number reuse with replayed messages and key\n     reinstallation\n     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n     [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n   * added support for FILS (IEEE 802.11ai) shared key authentication\n   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n     and transition mode defined by WFA)\n   * added support for DPP (Wi-Fi Device Provisioning Protocol)\n   * added support for RSA 3k key case with Suite B 192-bit level\n   * fixed Suite B PMKSA caching not to update PMKID during each 4-way\n     handshake\n   * fixed EAP-pwd pre-processing with PasswordHashHash\n   * added EAP-pwd client support for salted passwords\n   * fixed a regression in TDLS prohibited bit validation\n   * started to use estimated throughput to avoid undesired signal\n     strength based roaming decision\n   * MACsec/MKA:\n     - new macsec_linux driver interface support for the Linux\n       kernel macsec module\n     - number of fixes and extensions\n   * added support for external persistent storage of PMKSA cache\n     (PMKSA_GET/PMKSA_ADD control interface commands; and\n      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n   * fixed mesh channel configuration pri/sec switch case\n   * added support for beacon report\n   * large number of other fixes, cleanup, and extensions\n   * added support for randomizing local address for GAS queries\n     (gas_rand_mac_addr parameter)\n   * fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n   * added option for using random WPS UUID (auto_uuid=1)\n   * added SHA256-hash support for OCSP certificate matching\n   * fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n   * fixed a regression in RSN pre-authentication candidate selection\n   * added option to configure allowed group management cipher suites\n     (group_mgmt network profile parameter)\n   * removed all PeerKey functionality\n   * fixed nl80211 AP and mesh mode configuration regression with\n     Linux 4.15 and newer\n   * added ap_isolate configuration option for AP mode\n   * added support for nl80211 to offload 4-way handshake into the driver\n   * added support for using wolfSSL cryptographic library\n   * SAE\n     - added support for configuring SAE password separately of the\n       WPA2 PSK/passphrase\n     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n       for SAE;\n       note: this is not backwards compatible, i.e., both the AP and\n       station side implementations will need to be update at the same\n       time to maintain interoperability\n     - added support for Password Identifier\n     - fixed FT-SAE PMKID matching\n   * Hotspot 2.0\n     - added support for fetching of Operator Icon Metadata ANQP-element\n     - added support for Roaming Consortium Selection element\n     - added support for Terms and Conditions\n     - added support for OSEN connection in a shared RSN BSS\n     - added support for fetching Venue URL information\n   * added support for using OpenSSL 1.1.1\n   * FT\n     - disabled PMKSA caching with FT since it is not fully functional\n     - added support for SHA384 based AKM\n     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n     - fixed additional IE inclusion in Reassociation Request frame when\n       using FT protocol\n\n- Changed service-files for start after network (systemd-networkd).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-3380,SUSE-SLE-Module-Basesystem-15-SP1-2020-3380,SUSE-SLE-Module-Basesystem-15-SP2-2020-3380,SUSE-SLE-Product-HPC-15-2020-3380,SUSE-SLE-Product-SLES-15-2020-3380,SUSE-SLE-Product-SLES_SAP-15-2020-3380",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3380-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:3380-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20203380-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:3380-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150934",
        "url": "https://bugzilla.suse.com/1150934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930077",
        "url": "https://bugzilla.suse.com/930077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930078",
        "url": "https://bugzilla.suse.com/930078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930079",
        "url": "https://bugzilla.suse.com/930079"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4141 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4142 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4143 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16275 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2020-11-19T08:31:42Z",
      "generator": {
        "date": "2020-11-19T08:31:42Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:3380-1",
      "initial_release_date": "2020-11-19T08:31:42Z",
      "revision_history": [
        {
          "date": "2020-11-19T08:31:42Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-4.20.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-2.9-4.20.1.aarch64",
                  "product_id": "wpa_supplicant-2.9-4.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-4.20.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-4.20.1.aarch64",
                  "product_id": "wpa_supplicant-gui-2.9-4.20.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-4.20.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-4.20.1.i586",
                  "product_id": "wpa_supplicant-2.9-4.20.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-4.20.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-4.20.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-4.20.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-4.20.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-2.9-4.20.1.ppc64le",
                  "product_id": "wpa_supplicant-2.9-4.20.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-4.20.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-4.20.1.ppc64le",
                  "product_id": "wpa_supplicant-gui-2.9-4.20.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-4.20.1.s390x",
                "product": {
                  "name": "wpa_supplicant-2.9-4.20.1.s390x",
                  "product_id": "wpa_supplicant-2.9-4.20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-4.20.1.s390x",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-4.20.1.s390x",
                  "product_id": "wpa_supplicant-gui-2.9-4.20.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-4.20.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-4.20.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-4.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-4.20.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-4.20.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-4.20.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.aarch64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.ppc64le as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.s390x as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.x86_64 as component of SUSE Linux Enterprise Server 15-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-4.20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-4.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4141",
          "url": "https://www.suse.com/security/cve/CVE-2015-4141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930077 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/930077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4141"
    },
    {
      "cve": "CVE-2015-4142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4142",
          "url": "https://www.suse.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930078 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/930078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4142"
    },
    {
      "cve": "CVE-2015-4143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4143",
          "url": "https://www.suse.com/security/cve/CVE-2015-4143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930079 for CVE-2015-4143",
          "url": "https://bugzilla.suse.com/930079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4143"
    },
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-16275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16275",
          "url": "https://www.suse.com/security/cve/CVE-2019-16275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150934 for CVE-2019-16275",
          "url": "https://bugzilla.suse.com/1150934"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16275"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
          "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-ESPOS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.aarch64",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.s390x",
            "SUSE Linux Enterprise Server 15-LTSS:wpa_supplicant-2.9-4.20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:wpa_supplicant-2.9-4.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-19T08:31:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    }
  ]
}

SUSE-SU-2022:1853-1

Vulnerability from csaf_suse - Published: 2022-05-26 07:12 - Updated: 2022-05-26 07:12

Summary

Security update for wpa_supplicant

Severity

Important

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the following issues: - CVE-2022-23303, CVE-2022-23304: Fixed SAE/EAP-pwd side-channel attacks (bsc#1194732, bsc#1194733) - CVE-2021-0326: Fixed P2P group information processing vulnerability (bsc#1181777) - Fix systemd device ready dependencies in wpa_supplicant@.service file. (bsc#1182805) - Limit P2P_DEVICE name to appropriate ifname size - Enable SAE support(jsc#SLE-14992). - Fix wicked wlan (bsc#1156920) - Change wpa_supplicant.service to ensure wpa_supplicant gets started before network. Fix WLAN config on boot with wicked. (bsc#1166933) - Adjust the service to start after network.target wrt bsc#1165266 Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - CVE-2015-8041: Using O_WRONLY flag [http://w1.fi/security/2015-5/]

Patchnames: HPE-Helion-OpenStack-8-2022-1853,SUSE-2022-1853,SUSE-OpenStack-Cloud-8-2022-1853,SUSE-OpenStack-Cloud-9-2022-1853,SUSE-OpenStack-Cloud-Crowbar-8-2022-1853,SUSE-OpenStack-Cloud-Crowbar-9-2022-1853,SUSE-SLE-SAP-12-SP3-2022-1853,SUSE-SLE-SAP-12-SP4-2022-1853,SUSE-SLE-SERVER-12-SP2-BCL-2022-1853,SUSE-SLE-SERVER-12-SP3-2022-1853,SUSE-SLE-SERVER-12-SP3-BCL-2022-1853,SUSE-SLE-SERVER-12-SP4-LTSS-2022-1853

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2015-8041

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13077

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13082

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13086

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2018-14526

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-11555

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-13377

5.9 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9494

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9495

6.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9497

3.1 (Low)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9498

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9499

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2022-23303

7.4 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2022-23304

7.4 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/1131644	self
	https://bugzilla.suse.com/1131868	self
	https://bugzilla.suse.com/1131870	self
	https://bugzilla.suse.com/1131871	self
	https://bugzilla.suse.com/1131872	self
	https://bugzilla.suse.com/1131874	self
	https://bugzilla.suse.com/1133640	self
	https://bugzilla.suse.com/1144443	self
	https://bugzilla.suse.com/1156920	self
	https://bugzilla.suse.com/1165266	self
	https://bugzilla.suse.com/1166933	self
	https://bugzilla.suse.com/1167331	self
	https://bugzilla.suse.com/1182805	self
	https://bugzilla.suse.com/1194732	self
	https://bugzilla.suse.com/1194733	self
	https://www.suse.com/security/cve/CVE-2015-8041/	self
	https://www.suse.com/security/cve/CVE-2017-13077/	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13082/	self
	https://www.suse.com/security/cve/CVE-2017-13086/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2018-14526/	self
	https://www.suse.com/security/cve/CVE-2019-11555/	self
	https://www.suse.com/security/cve/CVE-2019-13377/	self
	https://www.suse.com/security/cve/CVE-2019-9494/	self
	https://www.suse.com/security/cve/CVE-2019-9495/	self
	https://www.suse.com/security/cve/CVE-2019-9497/	self
	https://www.suse.com/security/cve/CVE-2019-9498/	self
	https://www.suse.com/security/cve/CVE-2019-9499/	self
	https://www.suse.com/security/cve/CVE-2022-23303/	self
	https://www.suse.com/security/cve/CVE-2022-23304/	self
	https://www.suse.com/security/cve/CVE-2015-8041	external
	https://bugzilla.suse.com/937419	external
	https://www.suse.com/security/cve/CVE-2017-13077	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063963	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13082	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13086	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2018-14526	external
	https://bugzilla.suse.com/1104205	external
	https://www.suse.com/security/cve/CVE-2019-11555	external
	https://bugzilla.suse.com/1133640	external
	https://www.suse.com/security/cve/CVE-2019-13377	external
	https://bugzilla.suse.com/1144443	external
	https://www.suse.com/security/cve/CVE-2019-9494	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131868	external
	https://bugzilla.suse.com/1194732	external
	https://www.suse.com/security/cve/CVE-2019-9495	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131870	external
	https://bugzilla.suse.com/1194733	external
	https://www.suse.com/security/cve/CVE-2019-9497	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9498	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9499	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2022-23303	external
	https://bugzilla.suse.com/1194732	external
	https://bugzilla.suse.com/1205064	external
	https://www.suse.com/security/cve/CVE-2022-23304	external
	https://bugzilla.suse.com/1194733	external
	https://bugzilla.suse.com/1205064	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\n- CVE-2022-23303, CVE-2022-23304: Fixed SAE/EAP-pwd side-channel attacks (bsc#1194732, bsc#1194733)\n- CVE-2021-0326: Fixed P2P group information processing vulnerability (bsc#1181777)\n\n- Fix systemd device ready dependencies in wpa_supplicant@.service file. (bsc#1182805)\n\n- Limit P2P_DEVICE name to appropriate ifname size\n- Enable SAE support(jsc#SLE-14992).\n- Fix wicked wlan (bsc#1156920)\n- Change wpa_supplicant.service to ensure wpa_supplicant gets started before\n  network. Fix WLAN config on boot with wicked. (bsc#1166933)\n\n- Adjust the service to start after network.target wrt bsc#1165266\n\nUpdate to 2.9 release:\n\n* SAE changes\n  - disable use of groups using Brainpool curves\n  - improved protection against side channel attacks\n  [https://w1.fi/security/2019-6/]\n* EAP-pwd changes\n  - disable use of groups using Brainpool curves\n  - allow the set of groups to be configured (eap_pwd_groups)\n  - improved protection against side channel attacks\n  [https://w1.fi/security/2019-6/]\n* fixed FT-EAP initial mobility domain association using PMKSA caching\n  (disabled by default for backwards compatibility; can be enabled\n  with ft_eap_pmksa_caching=1)\n* fixed a regression in OpenSSL 1.1+ engine loading\n* added validation of RSNE in (Re)Association Response frames\n* fixed DPP bootstrapping URI parser of channel list\n* extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n* extended ca_cert_blob to support PEM format\n* improved robustness of P2P Action frame scheduling\n* added support for EAP-SIM/AKA using anonymous@realm identity\n* fixed Hotspot 2.0 credential selection based on roaming consortium\n  to ignore credentials without a specific EAP method\n* added experimental support for EAP-TEAP peer (RFC 7170)\n* added experimental support for EAP-TLS peer with TLS v1.3\n* fixed a regression in WMM parameter configuration for a TDLS peer\n* fixed a regression in operation with drivers that offload 802.1X\n  4-way handshake\n* fixed an ECDH operation corner case with OpenSSL\n* SAE changes\n  - added support for SAE Password Identifier\n  - changed default configuration to enable only groups 19, 20, 21\n    (i.e., disable groups 25 and 26) and disable all unsuitable groups\n    completely based on REVmd changes\n  - do not regenerate PWE unnecessarily when the AP uses the\n    anti-clogging token mechanisms\n  - fixed some association cases where both SAE and FT-SAE were enabled\n    on both the station and the selected AP\n  - started to prefer FT-SAE over SAE AKM if both are enabled\n  - started to prefer FT-SAE over FT-PSK if both are enabled\n  - fixed FT-SAE when SAE PMKSA caching is used\n  - reject use of unsuitable groups based on new implementation guidance\n    in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n    groups with prime \u003e= 256)\n  - minimize timing and memory use differences in PWE derivation\n    [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n* EAP-pwd changes\n  - minimize timing and memory use differences in PWE derivation\n    [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n  - verify server scalar/element\n    [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n    CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n  - fix message reassembly issue with unexpected fragment\n    [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n  - enforce rand,mask generation rules more strictly\n  - fix a memory leak in PWE derivation\n  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n    27)\n  - SAE/EAP-pwd side-channel attack update\n    [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n* fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n* Hotspot 2.0 changes\n  - do not indicate release number that is higher than the one\n    AP supports\n  - added support for release number 3\n  - enable PMF automatically for network profiles created from\n    credentials\n* fixed OWE network profile saving\n* fixed DPP network profile saving\n* added support for RSN operating channel validation\n  (CONFIG_OCV=y and network profile parameter ocv=1)\n* added Multi-AP backhaul STA support\n* fixed build with LibreSSL\n* number of MKA/MACsec fixes and extensions\n* extended domain_match and domain_suffix_match to allow list of values\n* fixed dNSName matching in domain_match and domain_suffix_match when\n  using wolfSSL\n* started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n  are enabled\n* extended nl80211 Connect and external authentication to support\n  SAE, FT-SAE, FT-EAP-SHA384\n* fixed KEK2 derivation for FILS+FT\n* extended client_cert file to allow loading of a chain of PEM\n  encoded certificates\n* extended beacon reporting functionality\n* extended D-Bus interface with number of new properties\n* fixed a regression in FT-over-DS with mac80211-based drivers\n* OpenSSL: allow systemwide policies to be overridden\n* extended driver flags indication for separate 802.1X and PSK\n  4-way handshake offload capability\n* added support for random P2P Device/Interface Address use\n* extended PEAP to derive EMSK to enable use with ERP/FILS\n* extended WPS to allow SAE configuration to be added automatically\n  for PSK (wps_cred_add_sae=1)\n* removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n* extended domain_match and domain_suffix_match to allow list of values\n* added a RSN workaround for misbehaving PMF APs that advertise\n  IGTK/BIP KeyID using incorrect byte order\n* fixed PTK rekeying with FILS and FT\n* fixed WPA packet number reuse with replayed messages and key\n  reinstallation\n  [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n  CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n  CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n* fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n  [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n* added support for FILS (IEEE 802.11ai) shared key authentication\n* added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n  and transition mode defined by WFA)\n* added support for DPP (Wi-Fi Device Provisioning Protocol)\n* added support for RSA 3k key case with Suite B 192-bit level\n* fixed Suite B PMKSA caching not to update PMKID during each 4-way\n  handshake\n* fixed EAP-pwd pre-processing with PasswordHashHash\n* added EAP-pwd client support for salted passwords\n* fixed a regression in TDLS prohibited bit validation\n* started to use estimated throughput to avoid undesired signal\n  strength based roaming decision\n* MACsec/MKA:\n  - new macsec_linux driver interface support for the Linux\n    kernel macsec module\n  - number of fixes and extensions\n* added support for external persistent storage of PMKSA cache\n  (PMKSA_GET/PMKSA_ADD control interface commands; and\n   MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n* fixed mesh channel configuration pri/sec switch case\n* added support for beacon report\n* large number of other fixes, cleanup, and extensions\n* added support for randomizing local address for GAS queries\n  (gas_rand_mac_addr parameter)\n* fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n* added option for using random WPS UUID (auto_uuid=1)\n* added SHA256-hash support for OCSP certificate matching\n* fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n* fixed a regression in RSN pre-authentication candidate selection\n* added option to configure allowed group management cipher suites\n  (group_mgmt network profile parameter)\n* removed all PeerKey functionality\n* fixed nl80211 AP and mesh mode configuration regression with\n  Linux 4.15 and newer\n* added ap_isolate configuration option for AP mode\n* added support for nl80211 to offload 4-way handshake into the driver\n* added support for using wolfSSL cryptographic library\n* SAE\n  - added support for configuring SAE password separately of the\n    WPA2 PSK/passphrase\n  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n    for SAE;\n    note: this is not backwards compatible, i.e., both the AP and\n    station side implementations will need to be update at the same\n    time to maintain interoperability\n  - added support for Password Identifier\n  - fixed FT-SAE PMKID matching\n* Hotspot 2.0\n  - added support for fetching of Operator Icon Metadata ANQP-element\n  - added support for Roaming Consortium Selection element\n  - added support for Terms and Conditions\n  - added support for OSEN connection in a shared RSN BSS\n  - added support for fetching Venue URL information\n* added support for using OpenSSL 1.1.1\n* FT\n  - disabled PMKSA caching with FT since it is not fully functional\n  - added support for SHA384 based AKM\n  - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n    BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n  - fixed additional IE inclusion in Reassociation Request frame when\n    using FT protocol\n\n- CVE-2015-8041: Using O_WRONLY flag [http://w1.fi/security/2015-5/]",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "HPE-Helion-OpenStack-8-2022-1853,SUSE-2022-1853,SUSE-OpenStack-Cloud-8-2022-1853,SUSE-OpenStack-Cloud-9-2022-1853,SUSE-OpenStack-Cloud-Crowbar-8-2022-1853,SUSE-OpenStack-Cloud-Crowbar-9-2022-1853,SUSE-SLE-SAP-12-SP3-2022-1853,SUSE-SLE-SAP-12-SP4-2022-1853,SUSE-SLE-SERVER-12-SP2-BCL-2022-1853,SUSE-SLE-SERVER-12-SP3-2022-1853,SUSE-SLE-SERVER-12-SP3-BCL-2022-1853,SUSE-SLE-SERVER-12-SP4-LTSS-2022-1853",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1853-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:1853-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20221853-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:1853-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165266",
        "url": "https://bugzilla.suse.com/1165266"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1182805",
        "url": "https://bugzilla.suse.com/1182805"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1194732",
        "url": "https://bugzilla.suse.com/1194732"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1194733",
        "url": "https://bugzilla.suse.com/1194733"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23303 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23303/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23304 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23304/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2022-05-26T07:12:18Z",
      "generator": {
        "date": "2022-05-26T07:12:18Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:1853-1",
      "initial_release_date": "2022-05-26T07:12:18Z",
      "revision_history": [
        {
          "date": "2022-05-26T07:12:18Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-15.22.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-2.9-15.22.1.aarch64",
                  "product_id": "wpa_supplicant-2.9-15.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-15.22.1.aarch64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-15.22.1.aarch64",
                  "product_id": "wpa_supplicant-gui-2.9-15.22.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-15.22.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-15.22.1.i586",
                  "product_id": "wpa_supplicant-2.9-15.22.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-15.22.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-15.22.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-15.22.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-15.22.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-2.9-15.22.1.ppc64le",
                  "product_id": "wpa_supplicant-2.9-15.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-15.22.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-15.22.1.ppc64le",
                  "product_id": "wpa_supplicant-gui-2.9-15.22.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-15.22.1.s390",
                "product": {
                  "name": "wpa_supplicant-2.9-15.22.1.s390",
                  "product_id": "wpa_supplicant-2.9-15.22.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-15.22.1.s390",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-15.22.1.s390",
                  "product_id": "wpa_supplicant-gui-2.9-15.22.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-15.22.1.s390x",
                "product": {
                  "name": "wpa_supplicant-2.9-15.22.1.s390x",
                  "product_id": "wpa_supplicant-2.9-15.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-15.22.1.s390x",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-15.22.1.s390x",
                  "product_id": "wpa_supplicant-gui-2.9-15.22.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-15.22.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-15.22.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-15.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-15.22.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-15.22.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-15.22.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "HPE Helion OpenStack 8",
                "product": {
                  "name": "HPE Helion OpenStack 8",
                  "product_id": "HPE Helion OpenStack 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:hpe-helion-openstack:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 8",
                "product": {
                  "name": "SUSE OpenStack Cloud 8",
                  "product_id": "SUSE OpenStack Cloud 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 9",
                "product": {
                  "name": "SUSE OpenStack Cloud 9",
                  "product_id": "SUSE OpenStack Cloud 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 8",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 8",
                  "product_id": "SUSE OpenStack Cloud Crowbar 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 9",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 9",
                  "product_id": "SUSE OpenStack Cloud Crowbar 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE OpenStack Cloud 9",
          "product_id": "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
          "product_id": "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-15.22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-15.22.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    },
    {
      "cve": "CVE-2022-23303",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23303"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23303",
          "url": "https://www.suse.com/security/cve/CVE-2022-23303"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2022-23303",
          "url": "https://bugzilla.suse.com/1194732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1205064 for CVE-2022-23303",
          "url": "https://bugzilla.suse.com/1205064"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23303"
    },
    {
      "cve": "CVE-2022-23304",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23304"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23304",
          "url": "https://www.suse.com/security/cve/CVE-2022-23304"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2022-23304",
          "url": "https://bugzilla.suse.com/1194733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1205064 for CVE-2022-23304",
          "url": "https://bugzilla.suse.com/1205064"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4-LTSS:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud 9:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:wpa_supplicant-2.9-15.22.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 9:wpa_supplicant-2.9-15.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-26T07:12:18Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23304"
    }
  ]
}

GSD-2017-13088

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

Aliases

CVE-2017-13088

Aliases

CVE-2017-13088

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-13088",
    "description": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
    "id": "GSD-2017-13088",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-13088.html",
      "https://www.debian.org/security/2017/dsa-3999",
      "https://access.redhat.com/errata/RHSA-2017:2907",
      "https://ubuntu.com/security/CVE-2017-13088",
      "https://advisories.mageia.org/CVE-2017-13088.html",
      "https://security.archlinux.org/CVE-2017-13088",
      "https://linux.oracle.com/cve/CVE-2017-13088.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-13088"
      ],
      "details": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
      "id": "GSD-2017-13088",
      "modified": "2023-12-13T01:21:01.648298Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cert@cert.org",
        "ID": "CVE-2017-13088",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Wi-Fi Protected Access (WPA and WPA2)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "WPA"
                        },
                        {
                          "version_value": "WPA2"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Wi-Fi Alliance"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-323: Reusing a Nonce, Key Pair in Encryption"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1039581",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039581"
          },
          {
            "name": "101274",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/101274"
          },
          {
            "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
            "refsource": "CONFIRM",
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "SUSE-SU-2017:2745",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
          },
          {
            "name": "DSA-3999",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2017/dsa-3999"
          },
          {
            "name": "1039578",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039578"
          },
          {
            "name": "https://access.redhat.com/security/vulnerabilities/kracks",
            "refsource": "CONFIRM",
            "url": "https://access.redhat.com/security/vulnerabilities/kracks"
          },
          {
            "name": "20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II",
            "refsource": "CISCO",
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
          },
          {
            "name": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
            "refsource": "MISC",
            "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
          },
          {
            "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
            "refsource": "CONFIRM",
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt"
          },
          {
            "name": "1039577",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039577"
          },
          {
            "name": "openSUSE-SU-2017:2755",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
          },
          {
            "name": "https://source.android.com/security/bulletin/2017-11-01",
            "refsource": "CONFIRM",
            "url": "https://source.android.com/security/bulletin/2017-11-01"
          },
          {
            "name": "GLSA-201711-03",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201711-03"
          },
          {
            "name": "RHSA-2017:2907",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2907"
          },
          {
            "name": "https://support.lenovo.com/us/en/product_security/LEN-17420",
            "refsource": "CONFIRM",
            "url": "https://support.lenovo.com/us/en/product_security/LEN-17420"
          },
          {
            "name": "FreeBSD-SA-17:07",
            "refsource": "FREEBSD",
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc"
          },
          {
            "name": "https://www.krackattacks.com/",
            "refsource": "MISC",
            "url": "https://www.krackattacks.com/"
          },
          {
            "name": "1039573",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039573"
          },
          {
            "name": "SUSE-SU-2017:2752",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
          },
          {
            "name": "1039576",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039576"
          },
          {
            "name": "VU#228519",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/228519"
          },
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
            "refsource": "CONFIRM",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf"
          },
          {
            "name": "https://cert.vde.com/en-us/advisories/vde-2017-005",
            "refsource": "CONFIRM",
            "url": "https://cert.vde.com/en-us/advisories/vde-2017-005"
          },
          {
            "name": "USN-3455-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-3455-1"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.5.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.3.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.3.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.3.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.6.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.5.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.4.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.4.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.5.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.5.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.4.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.3.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.3.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.6.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.6.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.4.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.4.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.2.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:hostapd:0.2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.6.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.5.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.4.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:w1.fi:wpa_supplicant:0.2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:ltss:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:openstack_cloud:6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2017-13088"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-330"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.krackattacks.com/",
              "refsource": "MISC",
              "tags": [
                "Technical Description",
                "Third Party Advisory"
              ],
              "url": "https://www.krackattacks.com/"
            },
            {
              "name": "VU#228519",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/228519"
            },
            {
              "name": "1039581",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1039581"
            },
            {
              "name": "1039578",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1039578"
            },
            {
              "name": "1039577",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1039577"
            },
            {
              "name": "1039576",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1039576"
            },
            {
              "name": "1039573",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1039573"
            },
            {
              "name": "101274",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/101274"
            },
            {
              "name": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
            },
            {
              "name": "20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II",
              "refsource": "CISCO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
            },
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-17420",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.lenovo.com/us/en/product_security/LEN-17420"
            },
            {
              "name": "FreeBSD-SA-17:07",
              "refsource": "FREEBSD",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/kracks",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/security/vulnerabilities/kracks"
            },
            {
              "name": "RHSA-2017:2907",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2907"
            },
            {
              "name": "USN-3455-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-3455-1"
            },
            {
              "name": "DSA-3999",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2017/dsa-3999"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt"
            },
            {
              "name": "openSUSE-SU-2017:2755",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html"
            },
            {
              "name": "SUSE-SU-2017:2752",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html"
            },
            {
              "name": "SUSE-SU-2017:2745",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html"
            },
            {
              "name": "GLSA-201711-03",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201711-03"
            },
            {
              "name": "https://source.android.com/security/bulletin/2017-11-01",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://source.android.com/security/bulletin/2017-11-01"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf"
            },
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2017-005",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://cert.vde.com/en-us/advisories/vde-2017-005"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 5.5,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 1.6,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2019-10-03T00:03Z",
      "publishedDate": "2017-10-17T13:29Z"
    }
  }
}

WID-SEC-W-2025-0369

Vulnerability from csaf_certbund - Published: 2017-10-15 22:00 - Updated: 2025-02-16 23:00

Summary

IEEE WPA2: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: WPA2 ist der aktuelle Verschlüsselungsstandard für Wireless LAN.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Betroffene Betriebssysteme: - Android - Appliance - BIOS/Firmware - CISCO Appliance - Hardware Appliance - iPhoneOS - Linux - Sonstiges - UNIX - Windows

CVE-2017-13077

CVE-2017-13078

CVE-2017-13079

CVE-2017-13080

CVE-2017-13081

CVE-2017-13082

CVE-2017-13084

CVE-2017-13086

CVE-2017-13087

CVE-2017-13088

References

URL

Category

	https://wid.cert-bund.de/.well-known/csaf/white/2…	self
	https://wid.cert-bund.de/portal/wid/securityadvis…	self
	http://seclists.org/oss-sec/2017/q4/83	external
	https://www.krackattacks.com/	external
	https://lists.debian.org/debian-security-announce…	external
	https://security-center.intel.com/advisory.aspx?i…	external
	http://www.ubuntu.com/usn/usn-3455-1/	external
	https://community.sophos.com/kb/en-us/127658	external
	https://tools.cisco.com/security/center/content/C…	external
	https://portal.msrc.microsoft.com/en-US/security-…	external
	https://kb.juniper.net/InfoCenter/index?page=cont…	external
	https://lists.freebsd.org/pipermail/freebsd-annou…	external
	https://www.suse.com/support/update/announcement/…	external
	https://access.redhat.com/errata/RHSA-2017:2907	external
	https://www.suse.com/support/update/announcement/…	external
	http://linux.oracle.com/errata/ELSA-2017-2907.html	external
	http://centos-announce.2309468.n4.nabble.com/Cent…	external
	https://access.redhat.com/errata/RHSA-2017:2911	external
	https://lists.centos.org/pipermail/centos-announc…	external
	https://avm.de/service/aktuelle-sicherheitshinweise/	external
	http://fortiguard.com/psirt/FG-IR-17-196	external
	https://www.suse.com/support/update/announcement/…	external
	https://tools.cisco.com/security/center/content/C…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://security-center.intel.com/advisory.aspx?i…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	http://www.ubuntu.com/usn/usn-3505-1/	external
	https://www.suse.com/support/update/announcement/…	external
	https://www.suse.com/support/update/announcement/…	external
	http://support.blackberry.com/kb/articleDetail?la…	external
	https://lists.suse.com/pipermail/sle-security-upd…	external
	https://lists.suse.com/pipermail/sle-security-upd…	external
	https://lists.suse.com/pipermail/sle-security-upd…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external
	https://lists.opensuse.org/archives/list/security…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "WPA2 ist der aktuelle Verschl\u00fcsselungsstandard f\u00fcr Wireless LAN.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Android\n- Appliance\n- BIOS/Firmware\n- CISCO Appliance\n- Hardware Appliance\n- iPhoneOS\n- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0369 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2025-0369.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0369 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0369"
      },
      {
        "category": "external",
        "summary": "Meldung auf der OSS-Sec Mailing Liste vom 2017-10-16",
        "url": "http://seclists.org/oss-sec/2017/q4/83"
      },
      {
        "category": "external",
        "summary": "Meldung auf Krack Attack Stand 2017-10-16",
        "url": "https://www.krackattacks.com/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-3999-1 vom 2017-10-16",
        "url": "https://lists.debian.org/debian-security-announce/2017/msg00261.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory INTEL-SA-00101 vom 2017-10-16",
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00101\u0026languageid=en-fr"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-3455-1 vom 2017-10-16",
        "url": "http://www.ubuntu.com/usn/usn-3455-1/"
      },
      {
        "category": "external",
        "summary": "Sophos Knowledge Base #127658",
        "url": "https://community.sophos.com/kb/en-us/127658"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20171016-wpa vom 2017-10-17",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Guidance CVE-2017-13080 vom 2017-10-16",
        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA10827 vom 2017-10-16",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10827"
      },
      {
        "category": "external",
        "summary": "FreeBSD Security Notice vom 2017-10-16",
        "url": "https://lists.freebsd.org/pipermail/freebsd-announce/2017-October/001805.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:2745-1 vom 2017-10-17",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172745-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2017:2907 vom 2017-10-18",
        "url": "https://access.redhat.com/errata/RHSA-2017:2907"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:2752-1 vom 2017-10-18",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172752-1.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2017-2907 vom 2017-10-18",
        "url": "http://linux.oracle.com/errata/ELSA-2017-2907.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2017:2907 vom 2017-10-17",
        "url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2017-2907-Important-CentOS-7-wpa-supplicant-Security-Update-tp4644777.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2017:2911 vom 2017-10-18",
        "url": "https://access.redhat.com/errata/RHSA-2017:2911"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2017:2911 vom 2017-10-18",
        "url": "https://lists.centos.org/pipermail/centos-announce/2017-October/022570.html"
      },
      {
        "category": "external",
        "summary": "Meldung von AVM Stand 2017-10-19",
        "url": "https://avm.de/service/aktuelle-sicherheitshinweise/"
      },
      {
        "category": "external",
        "summary": "Fortinet Advisory FG-IR-17-196 vom 2017-10-24",
        "url": "http://fortiguard.com/psirt/FG-IR-17-196"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:2847-1 vom 2017-10-25",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172847-1.html"
      },
      {
        "category": "external",
        "summary": "Update des Cisco Security Advisory cisco-sa-20171016-wpa Stand 2017-10-25",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:2869-1 vom 2017-10-27",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172869-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:2908-1 vom 2017-10-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172908-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:2920-1 vom 2017-11-02",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172920-1.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory INTEL-SA-00093 vom 2017-11-21",
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00093\u0026languageid=en-fr"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3117-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173117-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3123-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173123-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3118-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173118-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3125-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173125-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3132-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173132-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3119-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173119-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3124-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173124-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3131-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173131-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3130-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173130-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3127-1 vom 2017-11-30",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173127-1.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-3505-1 vom 2017-12-06",
        "url": "http://www.ubuntu.com/usn/usn-3505-1/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2017:3265-1 vom 2017-12-12",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173265-1.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2018:0040-1 vom 2018-01-09",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180040-1.html"
      },
      {
        "category": "external",
        "summary": "Blackberry Advisory Article Number: 000046425",
        "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000046425"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2020:3424-1 vom 2020-11-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2020:3380-1 vom 2020-11-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:1853-1 vom 2022-05-26",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14791-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ILZHMVR4NNCE6NWCEPZ2BVWZXYSWRTS/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14770-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WU6USOH6Z5LBH65E37F7SXQ2ZCYMYO4C/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14778-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E3XCURBMJRRPRVU3EVKDNACDUEBSYOCK/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14777-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/K4CQIJEA5UAOBWUSUVTBHDHKQNBQURQG/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14787-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FWMIURVH3RGSXYDDHGU2A5NU4OI3OLPB/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14796-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/JRVYJFDMGL4ZFIAYJKJTQHRR5SPMPZJ2/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14776-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5VY6LKWXFA5DZKFFJWA52HJLZ3GJXUDB/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14800-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XIORKETHKWBJRRYF55G3J3DL3T7QGOEL/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14797-1 vom 2025-02-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RLB6EQ4PQFULA6326VPRQRWW66T32SST/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:14804-1 vom 2025-02-14",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EISBLM6MW64JFKX5G6QNSKXKI34QXKQ4/"
      }
    ],
    "source_lang": "en-US",
    "title": "IEEE WPA2: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-02-16T23:00:00.000+00:00",
      "generator": {
        "date": "2025-02-17T09:16:50.201+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0369",
      "initial_release_date": "2017-10-15T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2017-10-15T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initial Release"
        },
        {
          "date": "2017-10-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "3",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "4",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "5",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "6",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "7",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "8",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-16T22:00:00.000+00:00",
          "number": "9",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-17T22:00:00.000+00:00",
          "number": "10",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-17T22:00:00.000+00:00",
          "number": "11",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-17T22:00:00.000+00:00",
          "number": "12",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-19T22:00:00.000+00:00",
          "number": "13",
          "summary": "new affected product"
        },
        {
          "date": "2017-10-24T22:00:00.000+00:00",
          "number": "14",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-24T22:00:00.000+00:00",
          "number": "15",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-25T22:00:00.000+00:00",
          "number": "16",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-25T22:00:00.000+00:00",
          "number": "17",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-10-29T23:00:00.000+00:00",
          "number": "18",
          "summary": "New remediations available"
        },
        {
          "date": "2017-10-31T23:00:00.000+00:00",
          "number": "19",
          "summary": "New remediations available"
        },
        {
          "date": "2017-11-02T23:00:00.000+00:00",
          "number": "20",
          "summary": "New remediations available"
        },
        {
          "date": "2017-11-06T23:00:00.000+00:00",
          "number": "21",
          "summary": "Added references"
        },
        {
          "date": "2017-11-21T23:00:00.000+00:00",
          "number": "22",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-11-29T23:00:00.000+00:00",
          "number": "23",
          "summary": "New remediations available"
        },
        {
          "date": "2017-11-29T23:00:00.000+00:00",
          "number": "24",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-11-29T23:00:00.000+00:00",
          "number": "25",
          "summary": "New remediations available"
        },
        {
          "date": "2017-12-05T23:00:00.000+00:00",
          "number": "26",
          "summary": "New remediations available"
        },
        {
          "date": "2017-12-11T23:00:00.000+00:00",
          "number": "27",
          "summary": "New remediations available"
        },
        {
          "date": "2018-01-08T23:00:00.000+00:00",
          "number": "28",
          "summary": "New remediations available"
        },
        {
          "date": "2018-01-28T23:00:00.000+00:00",
          "number": "29",
          "summary": "New remediations available"
        },
        {
          "date": "2020-11-19T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-05-26T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-02-13T23:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von openSUSE aufgenommen"
        },
        {
          "date": "2025-02-16T23:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von openSUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "33"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "AVM FRITZ!Box",
            "product": {
              "name": "AVM FRITZ!Box",
              "product_id": "T002543",
              "product_identification_helper": {
                "cpe": "cpe:/o:avm:fritzos:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "AVM FRITZ!WLAN",
            "product": {
              "name": "AVM FRITZ!WLAN",
              "product_id": "T011056",
              "product_identification_helper": {
                "cpe": "cpe:/h:avm:fritzwlan_repeater:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "AVM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco AP541N Wireless Access Point",
            "product": {
              "name": "Cisco AP541N Wireless Access Point",
              "product_id": "T000634",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:ap541n_wireless_access_point:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco AnyConnect Secure Mobility Solution",
            "product": {
              "name": "Cisco AnyConnect Secure Mobility Solution",
              "product_id": "T001830",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:anyconnect_secure_mobility_client:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco IP Phone",
            "product": {
              "name": "Cisco IP Phone",
              "product_id": "2070",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:ip_phone:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Small Business",
            "product": {
              "name": "Cisco Small Business",
              "product_id": "T006607",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:small_business:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fortinet FortiGate",
            "product": {
              "name": "Fortinet FortiGate",
              "product_id": "T004020",
              "product_identification_helper": {
                "cpe": "cpe:/h:fortinet:fortigate:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Fortinet FortiOS",
            "product": {
              "name": "Fortinet FortiOS",
              "product_id": "T009615",
              "product_identification_helper": {
                "cpe": "cpe:/o:fortinet:fortios:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fortinet"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "FreeBSD Project FreeBSD OS",
            "product": {
              "name": "FreeBSD Project FreeBSD OS",
              "product_id": "4035",
              "product_identification_helper": {
                "cpe": "cpe:/o:freebsd:freebsd:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "FreeBSD Project"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Intel BIOS",
            "product": {
              "name": "Intel BIOS",
              "product_id": "T010955",
              "product_identification_helper": {
                "cpe": "cpe:/h:intel:bios:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Intel Xeon",
            "product": {
              "name": "Intel Xeon",
              "product_id": "T011286",
              "product_identification_helper": {
                "cpe": "cpe:/h:intel:xeon:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper JUNOS",
            "product": {
              "name": "Juniper JUNOS",
              "product_id": "5930",
              "product_identification_helper": {
                "cpe": "cpe:/o:juniper:junos:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Juniper SRX Series",
            "product": {
              "name": "Juniper SRX Series",
              "product_id": "T008011",
              "product_identification_helper": {
                "cpe": "cpe:/h:juniper:srx_service_gateways:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Juniper ScreenOS",
            "product": {
              "name": "Juniper ScreenOS",
              "product_id": "T008638",
              "product_identification_helper": {
                "cpe": "cpe:/o:juniper:screenos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Windows 10 for 32-bit Systems",
                "product": {
                  "name": "Microsoft Windows 10 for 32-bit Systems",
                  "product_id": "T005617",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Windows 10 for x64-based Systems",
                "product": {
                  "name": "Microsoft Windows 10 for x64-based Systems",
                  "product_id": "T005618",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:x64"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10"
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows 7",
            "product": {
              "name": "Microsoft Windows 7",
              "product_id": "100461",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_7:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows 8.1",
            "product": {
              "name": "Microsoft Windows 8.1",
              "product_id": "T002139",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_8.1:::x86"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Windows Server 2008",
                "product": {
                  "name": "Microsoft Windows Server 2008",
                  "product_id": "103824",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server_2008:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Windows Server 2008 R2 Service Pack 1",
                "product": {
                  "name": "Microsoft Windows Server 2008 R2 Service Pack 1",
                  "product_id": "149499",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server_2008:r2:sp1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2008 Service Pack 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Windows Server 2012",
                "product": {
                  "name": "Microsoft Windows Server 2012",
                  "product_id": "185379",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server_2012:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Windows Server 2012 R2",
                "product": {
                  "name": "Microsoft Windows Server 2012 R2",
                  "product_id": "T002138",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server_2012:r2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012"
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows Server 2016",
            "product": {
              "name": "Microsoft Windows Server 2016",
              "product_id": "T008880",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_server_2016:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "OpenBSD OpenBSD",
            "product": {
              "name": "OpenBSD OpenBSD",
              "product_id": "8222",
              "product_identification_helper": {
                "cpe": "cpe:/o:openbsd:openbsd:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "OpenBSD"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T027843",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Sophos Unified Threat Management (UTM) Software",
            "product": {
              "name": "Sophos Unified Threat Management (UTM) Software",
              "product_id": "T006910",
              "product_identification_helper": {
                "cpe": "cpe:/a:sophos:unified_threat_management_software:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Sophos"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Specification WPA2",
            "product": {
              "name": "Specification WPA2",
              "product_id": "T010954",
              "product_identification_helper": {
                "cpe": "cpe:/h:ieee:wpa2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Specification"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco ASA (Adaptive Security Appliance)",
            "product": {
              "name": "Cisco ASA (Adaptive Security Appliance)",
              "product_id": "138049",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:adaptive_security_appliance_device_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Aironet Access Point",
            "product": {
              "name": "Cisco Aironet Access Point",
              "product_id": "177610",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:aironet_3500:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13084",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13084"
    },
    {
      "cve": "CVE-2017-13086",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "product_status": {
        "known_affected": [
          "2070",
          "T010954",
          "T010955",
          "67646",
          "T008638",
          "4035",
          "100461",
          "T006910",
          "T011286",
          "149499",
          "T004914",
          "T000634",
          "T002139",
          "T002138",
          "138049",
          "5930",
          "177610",
          "T008011",
          "103824",
          "8222",
          "T009615",
          "T011056",
          "T005617",
          "T006607",
          "185379",
          "T005618",
          "2951",
          "T002207",
          "T000126",
          "T001830",
          "T027843",
          "T002543",
          "1727",
          "T004020",
          "T008880"
        ]
      },
      "release_date": "2017-10-15T22:00:00.000+00:00",
      "title": "CVE-2017-13088"
    }
  ]
}

VDE-2017-005

Vulnerability from csaf_pepperlfuchsse - Published: 2017-12-11 13:26 - Updated: 2018-10-23 10:00

Summary

Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption

Notes

Summary: Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. ecom instruments is a subsidiary company of PEPPERL+FUCHS.

Impact: ecom instruments devices are in theory attackable by replay, decryption and forging of packets. However, to perform the attack, the attacker must be significantly closer to the ecom device than to the access point. The WPA2 password cannot be compromised using a KRACK attack. Note if WPA-TKIP is used instead of AES-CCMP, an attacker can easily forge and inject packets directly into the WLAN.

Remediation: ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13077

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13078

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13081

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13082

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13086

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13087

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

CVE-2017-13088

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-330 - Use of Insufficiently Random Values

Vendor Fix ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

References

URL

Category

	https://certvde.com/en/advisories/VDE-2017-005/	self
	https://pepperl-fuchs.csaf-tp.certvde.com/.well-k…	self
	https://www.pepperl-fuchs.com	external
	https://certvde.com/en/advisories/vendor/pepperl-fuchs/	external

Acknowledgments

CERT@VDE certvde.com

imec-DistriNet Mathy Vanhoef

KU Leuven www.krackattacks.com

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet",
        "summary": "reporting"
      },
      {
        "names": [
          "KU Leuven"
        ],
        "summary": "reporting",
        "urls": [
          "https://www.krackattacks.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection.  \n  \necom instruments is a subsidiary company of PEPPERL+FUCHS.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "ecom instruments devices are in theory attackable by replay, decryption and forging of packets. However, to perform the attack, the attacker must be significantly closer to the ecom device than to the access point. The WPA2 password cannot be compromised using a KRACK attack. Note if WPA-TKIP is used instead of AES-CCMP, an attacker can easily forge and inject packets directly into the WLAN.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "cert@pepperl-fuchs.com",
      "name": "Pepperl+Fuchs SE",
      "namespace": "https://www.pepperl-fuchs.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2017-005: Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2017-005/"
      },
      {
        "category": "self",
        "summary": "VDE-2017-005: Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption - CSAF",
        "url": "https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2017/vde-2017-005.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://www.pepperl-fuchs.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Pepperl+Fuchs SE",
        "url": "https://certvde.com/en/advisories/vendor/pepperl-fuchs/"
      }
    ],
    "title": "Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption",
    "tracking": {
      "aliases": [
        "VDE-2017-005"
      ],
      "current_release_date": "2018-10-23T10:00:00.000Z",
      "generator": {
        "date": "2025-06-17T05:29:38.549Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.26"
        }
      },
      "id": "VDE-2017-005",
      "initial_release_date": "2017-12-11T13:26:00.000Z",
      "revision_history": [
        {
          "date": "2017-12-11T13:26:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "date": "2018-10-23T10:00:00.000Z",
          "number": "1.1.0",
          "summary": "Firmware for Android based devices now available."
        }
      ],
      "status": "final",
      "version": "1.1.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "CK70A-ATEX vers:all/*",
                      "product_id": "CSAFPID-11001"
                    }
                  }
                ],
                "category": "product_name",
                "name": "CK70A-ATEX"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "CK71A-ATEX vers:all/*",
                      "product_id": "CSAFPID-11002"
                    }
                  }
                ],
                "category": "product_name",
                "name": "CK71A-ATEX"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "CN70A-ATEX vers:all/*",
                      "product_id": "CSAFPID-11003"
                    }
                  }
                ],
                "category": "product_name",
                "name": "CN70A-ATEX"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "CN70E-ATEX vers:all/*",
                      "product_id": "CSAFPID-11004"
                    }
                  }
                ],
                "category": "product_name",
                "name": "CN70E-ATEX"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Ex-Handy 09 vers:all/*",
                      "product_id": "CSAFPID-11005"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Ex-Handy 09"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Ex-Handy 209 vers:all/*",
                      "product_id": "CSAFPID-11006"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Ex-Handy 209"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "i.roc Ci70-Ex vers:all/*",
                      "product_id": "CSAFPID-11007"
                    }
                  }
                ],
                "category": "product_name",
                "name": "i.roc Ci70-Ex"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Pad-Ex 01 vers:all/*",
                      "product_id": "CSAFPID-11008"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Pad-Ex 01"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Smart-Ex 01 vers:all/*",
                      "product_id": "CSAFPID-11009"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Smart-Ex 01"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Smart-Ex 201 vers:all/*",
                      "product_id": "CSAFPID-11010"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Smart-Ex 201"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "Tab-Ex 01 vers:all/*",
                      "product_id": "CSAFPID-11011"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Tab-Ex 01"
              }
            ],
            "category": "product_family",
            "name": "Software"
          }
        ],
        "category": "vendor",
        "name": "Vendor"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "FOTA-Update",
                "product": {
                  "name": "Android Firmware FOTA-Update",
                  "product_id": "CSAFPID-22001"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Android"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ],
        "summary": "Affected products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Android Firmware FOTA-Update installed on Smart-Ex 01 vers:all/*",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Android Firmware FOTA-Update installed on Smart-Ex 201 vers:all/*",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11010"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13080",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13079",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13081",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-11001",
          "CSAFPID-11002",
          "CSAFPID-11003",
          "CSAFPID-11004",
          "CSAFPID-11005",
          "CSAFPID-11006",
          "CSAFPID-11007",
          "CSAFPID-11008",
          "CSAFPID-11009",
          "CSAFPID-11010",
          "CSAFPID-11011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "### Android\n\n**Affected Products:**  \nTab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201\n\nPepperl+Fuchs has released firmware updates for the following products:\n\n| Product       | Date                  | Update Source |\n|---------------|-----------------------|----------------|\n| Smart-Ex 01   | Available since 09/2018 | FOTA-Update    |\n| Smart-Ex 201  | Available since 10/2018 | FOTA-Update    |\n\n---\n\n### Windows\n\n**Affected Products:**  \nPad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX\n\nFor *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft.  \nIf you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately.\n\n\u003e **Note:**  \n\u003e This advisory will be updated as further details and/or software updates become available.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-11001",
            "CSAFPID-11002",
            "CSAFPID-11003",
            "CSAFPID-11004",
            "CSAFPID-11005",
            "CSAFPID-11006",
            "CSAFPID-11007",
            "CSAFPID-11008",
            "CSAFPID-11009",
            "CSAFPID-11010",
            "CSAFPID-11011"
          ]
        }
      ],
      "title": "CVE-2017-13088"
    }
  ]
}

CNVD-2017-30397

Vulnerability from cnvd - Published: 2017-10-17

Title

WPA2无线网络休眠模式IGTK密钥重装漏洞

Description

WPA（Wi-Fi Protected Access）是一种保护无线电脑网络（Wi-Fi）安全的系统。 WPA2无线网络休眠模式存在IGTK密钥完整重装漏洞。漏洞是由于Wi-Fi保护访问II（WPA2）握手流量可以被操纵以引起随机数和会话密钥重用，导致无线接入点（AP）或客户端重新安装密钥。攻击者利用漏洞攻击可能包括任意数据包解密和注入，TCP连接劫持，HTTP内容注入或单播和组寻址帧的重放。

Severity

中

Patch Name

WPA2无线网络休眠模式IGTK密钥重装漏洞的补丁

Patch Description

WPA（Wi-Fi Protected Access）是一种保护无线电脑网络（Wi-Fi）安全的系统。 WPA2无线网络休眠模式存在IGTK密钥完整重装漏洞。漏洞是由于Wi-Fi保护访问II（WPA2）握手流量可以被操纵以引起随机数和会话密钥重用，导致无线接入点（AP）或客户端重新安装密钥。攻击者利用漏洞攻击可能包括任意数据包解密和注入，TCP连接劫持，HTTP内容注入或单播和组寻址帧的重放。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，详情请关注厂商主页： https://www.wi-fi.org/

Reference

https://www.kb.cert.org/vuls/id/228519/ http://www.securityfocus.com/bid/101274

Impacted products

Name
Wi-Fi Alliance Wi-Fi Protected Access 2(WPA2)

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "101274"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-13088"
    }
  },
  "description": "WPA\uff08Wi-Fi Protected Access\uff09\u662f\u4e00\u79cd\u4fdd\u62a4\u65e0\u7ebf\u7535\u8111\u7f51\u7edc\uff08Wi-Fi\uff09\u5b89\u5168\u7684\u7cfb\u7edf\u3002\r\n\r\nWPA2\u65e0\u7ebf\u7f51\u7edc\u4f11\u7720\u6a21\u5f0f\u5b58\u5728IGTK\u5bc6\u94a5\u5b8c\u6574\u91cd\u88c5\u6f0f\u6d1e\u3002\u6f0f\u6d1e\u662f\u7531\u4e8eWi-Fi\u4fdd\u62a4\u8bbf\u95eeII\uff08WPA2\uff09\u63e1\u624b\u6d41\u91cf\u53ef\u4ee5\u88ab\u64cd\u7eb5\u4ee5\u5f15\u8d77\u968f\u673a\u6570\u548c\u4f1a\u8bdd\u5bc6\u94a5\u91cd\u7528\uff0c\u5bfc\u81f4\u65e0\u7ebf\u63a5\u5165\u70b9\uff08AP\uff09\u6216\u5ba2\u6237\u7aef\u91cd\u65b0\u5b89\u88c5\u5bc6\u94a5\u3002\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u653b\u51fb\u53ef\u80fd\u5305\u62ec\u4efb\u610f\u6570\u636e\u5305\u89e3\u5bc6\u548c\u6ce8\u5165\uff0cTCP\u8fde\u63a5\u52ab\u6301\uff0cHTTP\u5185\u5bb9\u6ce8\u5165\u6216\u5355\u64ad\u548c\u7ec4\u5bfb\u5740\u5e27\u7684\u91cd\u653e\u3002",
  "discovererName": "Mathy Vanhoef of the imec-DistriNet group at KU Leuven",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.wi-fi.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-30397",
  "openTime": "2017-10-17",
  "patchDescription": "WPA\uff08Wi-Fi Protected Access\uff09\u662f\u4e00\u79cd\u4fdd\u62a4\u65e0\u7ebf\u7535\u8111\u7f51\u7edc\uff08Wi-Fi\uff09\u5b89\u5168\u7684\u7cfb\u7edf\u3002\r\n\r\nWPA2\u65e0\u7ebf\u7f51\u7edc\u4f11\u7720\u6a21\u5f0f\u5b58\u5728IGTK\u5bc6\u94a5\u5b8c\u6574\u91cd\u88c5\u6f0f\u6d1e\u3002\u6f0f\u6d1e\u662f\u7531\u4e8eWi-Fi\u4fdd\u62a4\u8bbf\u95eeII\uff08WPA2\uff09\u63e1\u624b\u6d41\u91cf\u53ef\u4ee5\u88ab\u64cd\u7eb5\u4ee5\u5f15\u8d77\u968f\u673a\u6570\u548c\u4f1a\u8bdd\u5bc6\u94a5\u91cd\u7528\uff0c\u5bfc\u81f4\u65e0\u7ebf\u63a5\u5165\u70b9\uff08AP\uff09\u6216\u5ba2\u6237\u7aef\u91cd\u65b0\u5b89\u88c5\u5bc6\u94a5\u3002\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u653b\u51fb\u53ef\u80fd\u5305\u62ec\u4efb\u610f\u6570\u636e\u5305\u89e3\u5bc6\u548c\u6ce8\u5165\uff0cTCP\u8fde\u63a5\u52ab\u6301\uff0cHTTP\u5185\u5bb9\u6ce8\u5165\u6216\u5355\u64ad\u548c\u7ec4\u5bfb\u5740\u5e27\u7684\u91cd\u653e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "WPA2\u65e0\u7ebf\u7f51\u7edc\u4f11\u7720\u6a21\u5f0fIGTK\u5bc6\u94a5\u91cd\u88c5\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Wi-Fi Alliance Wi-Fi Protected Access 2(WPA2)"
  },
  "referenceLink": "https://www.kb.cert.org/vuls/id/228519/\r\nhttp://www.securityfocus.com/bid/101274",
  "serverity": "\u4e2d",
  "submitTime": "2017-10-17",
  "title": "WPA2\u65e0\u7ebf\u7f51\u7edc\u4f11\u7720\u6a21\u5f0fIGTK\u5bc6\u94a5\u91cd\u88c5\u6f0f\u6d1e"
}

RHSA-2017:2907

Vulnerability from csaf_redhat - Published: 2017-10-17 21:38 - Updated: 2025-11-21 18:02

Summary

Red Hat Security Advisory: wpa_supplicant security update

Severity

Important

Notes

Topic: An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver. Security Fix(es): * A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) Red Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2017-13077

A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

CVE-2017-13078

A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

CVE-2017-13080

A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

CVE-2017-13082

A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) by retransmitting Fast BSS Transition (FT) Reassociation Requests.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

CVE-2017-13086

A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used Tunneled Direct-Link Setup (TDLS) Peerkey (TPK) key during a TDLS handshake.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

CVE-2017-13087

A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

CVE-2017-13088

A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used integrity group key (IGTK) during a Wireless Network Management (WNM) Sleep Mode handshake.

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2017:2907

References

URL

Category

	https://access.redhat.com/errata/RHSA-2017:2907	self
	https://access.redhat.com/security/updates/classi…	external
	https://access.redhat.com/security/vulnerabilitie…	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1491692	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1491693	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1491696	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1491698	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1500302	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1500303	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1500304	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2017-13077	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1491692	external
	https://www.cve.org/CVERecord?id=CVE-2017-13077	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13077	external
	https://access.redhat.com/security/vulnerabilitie…	external
	https://w1.fi/security/2017-1/wpa-packet-number-r…	external
	https://www.krackattacks.com/	external
	https://access.redhat.com/security/cve/CVE-2017-13078	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1491693	external
	https://www.cve.org/CVERecord?id=CVE-2017-13078	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13078	external
	https://access.redhat.com/security/cve/CVE-2017-13080	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1491696	external
	https://www.cve.org/CVERecord?id=CVE-2017-13080	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13080	external
	https://access.redhat.com/security/cve/CVE-2017-13082	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1491698	external
	https://www.cve.org/CVERecord?id=CVE-2017-13082	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13082	external
	https://access.redhat.com/security/cve/CVE-2017-13086	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1500302	external
	https://www.cve.org/CVERecord?id=CVE-2017-13086	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13086	external
	https://access.redhat.com/security/cve/CVE-2017-13087	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1500303	external
	https://www.cve.org/CVERecord?id=CVE-2017-13087	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13087	external
	https://access.redhat.com/security/cve/CVE-2017-13088	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1500304	external
	https://www.cve.org/CVERecord?id=CVE-2017-13088	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-13088	external

Acknowledgments

CERT

University of Leuven Mathy Vanhoef

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n\nRed Hat would like to thank CERT for reporting these issues. Upstream acknowledges Mathy Vanhoef (University of Leuven) as the original reporter of these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2907",
        "url": "https://access.redhat.com/errata/RHSA-2017:2907"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
        "url": "https://access.redhat.com/security/vulnerabilities/kracks"
      },
      {
        "category": "external",
        "summary": "1491692",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692"
      },
      {
        "category": "external",
        "summary": "1491693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693"
      },
      {
        "category": "external",
        "summary": "1491696",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696"
      },
      {
        "category": "external",
        "summary": "1491698",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698"
      },
      {
        "category": "external",
        "summary": "1500302",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302"
      },
      {
        "category": "external",
        "summary": "1500303",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303"
      },
      {
        "category": "external",
        "summary": "1500304",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2907.json"
      }
    ],
    "title": "Red Hat Security Advisory: wpa_supplicant security update",
    "tracking": {
      "current_release_date": "2025-11-21T18:02:38+00:00",
      "generator": {
        "date": "2025-11-21T18:02:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2017:2907",
      "initial_release_date": "2017-10-17T21:38:59+00:00",
      "revision_history": [
        {
          "date": "2017-10-17T21:38:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-17T21:38:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T18:02:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
                  "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
                  "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:2.6-5.el7_4.1.src",
                "product": {
                  "name": "wpa_supplicant-1:2.6-5.el7_4.1.src",
                  "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
                  "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
                "product": {
                  "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
                  "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
                  "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
                "product": {
                  "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
                  "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
                  "product_id": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
                "product": {
                  "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
                  "product_id": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@2.6-5.el7_4.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.src",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1491692"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACKs) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) during a 4-way handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "RHBZ#1491692",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491692"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13077",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13078",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1491693"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a 4-way handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "RHBZ#1491693",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491693"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13078",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wpa_supplicant: Reinstallation of the group key in the 4-way handshake"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13080",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1491696"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a group key handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: Reinstallation of the group key in the group key handshake",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "RHBZ#1491696",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491696"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13080",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wpa_supplicant: Reinstallation of the group key in the group key handshake"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13082",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1491698"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key (PTK-TK) by retransmitting Fast BSS Transition (FT) Reassociation Requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "RHBZ#1491698",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1491698"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13082",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13086",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-10-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1500302"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used Tunneled Direct-Link Setup (TDLS) Peerkey (TPK) key during a TDLS handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6, as it does not support TDLS.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "RHBZ#1500302",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500302"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13087",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-10-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1500303"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key (GTK) during a Wireless Network Management (WNM) Sleep Mode handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issues affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 6 and 7.\n\nThis issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "RHBZ#1500303",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500303"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13087",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CERT"
          ]
        },
        {
          "names": [
            "Mathy Vanhoef"
          ],
          "organization": "University of Leuven",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-13088",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "discovery_date": "2017-10-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1500304"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new exploitation technique called key reinstallation attacks (KRACK) affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used integrity group key (IGTK) during a Wireless Network Management (WNM) Sleep Mode handshake.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
          "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
          "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "RHBZ#1500304",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500304"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13088",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/kracks",
          "url": "https://access.redhat.com/security/vulnerabilities/kracks"
        },
        {
          "category": "external",
          "summary": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt",
          "url": "https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt"
        },
        {
          "category": "external",
          "summary": "https://www.krackattacks.com/",
          "url": "https://www.krackattacks.com/"
        }
      ],
      "release_date": "2017-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-17T21:38:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2907"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Client-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Client-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7ComputeNode-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7ComputeNode-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Server-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Server-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.src",
            "7Workstation-7.4.Z:wpa_supplicant-1:2.6-5.el7_4.1.x86_64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x",
            "7Workstation-7.4.Z:wpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame"
    }
  ]
}

ICSA-17-318-01

Vulnerability from csaf_cisa - Published: 2017-11-14 00:00 - Updated: 2019-04-09 00:00

Summary

ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)

Notes

CISA Disclaimer: This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

Summary: Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.

Exploitability: These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.

CVE-2017-13077

4.2 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13078

4.2 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13079

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13080

4.2 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13081

4.2 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13082

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13084

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13086

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13087

4.2 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

CVE-2017-13088

4.2 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-322 - Key Exchange without Entity Authentication

Mitigation Contact the RUGGEDCOM support team at:

References

URL

Category

	https://raw.githubusercontent.com/cisagov/CSAF/de…	self
	https://www.cisa.gov/news-events/ics-advisories/i…	self
	https://www.first.org/cvss/calculator/3.0#CVSS:3.…
	https://www.first.org/cvss/calculator/3.0#CVSS:3.…
	https://www.first.org/cvss/calculator/3.0#CVSS:3.…

Acknowledgments

the Katholieke Universiteit Leuven in Belgium Mathy Vanhoef

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "the Katholieke Universiteit Leuven in Belgium",
        "summary": "discovering these vulnerabilities"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "summary",
        "text": "Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.",
        "title": "Summary"
      },
      {
        "category": "other",
        "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "CISAservicedesk@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-318-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-318-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-01"
      }
    ],
    "title": "ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)",
    "tracking": {
      "current_release_date": "2019-04-09T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA USCert CSAF Generator",
          "version": "1"
        }
      },
      "id": "ICSA-17-318-01",
      "initial_release_date": "2017-11-14T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-11-14T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products"
        },
        {
          "date": "2017-12-05T00:00:00.000000Z",
          "legacy_version": "A",
          "number": "2",
          "summary": "ICSA-17-318-01A Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update A)"
        },
        {
          "date": "2017-12-19T00:00:00.000000Z",
          "legacy_version": "B",
          "number": "3",
          "summary": "ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update B)"
        },
        {
          "date": "2018-01-25T00:00:00.000000Z",
          "legacy_version": "C",
          "number": "4",
          "summary": "ICSA-17-318-01C Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)"
        },
        {
          "date": "2018-04-24T00:00:00.000000Z",
          "legacy_version": "D",
          "number": "5",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update D)"
        },
        {
          "date": "2018-11-13T00:00:00.000000Z",
          "legacy_version": "E",
          "number": "6",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update E)"
        },
        {
          "date": "2019-04-09T00:00:00.000000Z",
          "legacy_version": "F",
          "number": "7",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)"
        }
      ],
      "status": "final",
      "version": "7"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 22.3.5.16",
                "product": {
                  "name": "SIMATIC RF650M: All versions with Summit Client Utility prior to v22.3.5.16",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF650M"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SCALANCE W-700 (IEEE 802.11a/b/g): All versions",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W-700 (IEEE 802.11a/b/g)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Mobile Panel 277(F) IWLAN: All versions",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Mobile Panel 277(F) IWLAN"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RS9xxW: All versions",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS9xxW"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 22.3.5.16",
                "product": {
                  "name": "SIMATIC RF350M: All versions with Summit Client Utility prior to v22.3.5.16",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF350M"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 01.03.01",
                "product": {
                  "name": "SINAMICS v20 Smart Access Module: All versions prior to v01.03.01",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "SINAMICS v20 Smart Access Module"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 9.21.19.003",
                "product": {
                  "name": "SCALANCE WLC712: All versions prior to v9.21.19.003",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE WLC712"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 6.2.1",
                "product": {
                  "name": "SCALANCE W-700 (IEEE 802.11n): All versions prior to v6.2.1",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W-700 (IEEE 802.11n)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 6.5.1.5-4.3.1.8",
                "product": {
                  "name": "SCALANCE W1750D: All versions prior to v6.5.1.5-4.3.1.8",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W1750D"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 2.11.2",
                "product": {
                  "name": "RUGGEDCOM RX1400 with WLAN interface: All versions prior to v2.11.2",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RX1400 with WLAN interface"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IWLAN-PB/LINK: All versions",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IWLAN-PB/LINK"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 9.21.19.003",
                "product": {
                  "name": "SCALANCE WLC711: All versions prior to v9.21.19.003",
                  "product_id": "CSAFPID-00012"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE WLC711"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN: All versions",
                  "product_id": "CSAFPID-00013"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the pairwise key in the four-way handshake.CVE-2017-13077 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13078 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13079 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13080 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13081 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the pairwise transient key (PTK) temporal key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13082 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13084",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the station-to-station-link (STSL) transient key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13084 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13084"
    },
    {
      "cve": "CVE-2017-13086",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the tunneled direct-link setup (TDLS) peer key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13086 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the group temporal key (GTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13087 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the integrity group temporal key (IGTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13088 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13088"
    }
  ]
}

OPENSUSE-SU-2020:2059-1

Vulnerability from csaf_opensuse - Published: 2020-11-27 05:23 - Updated: 2020-11-27 05:23

Summary

Security update for wpa_supplicant

Severity

Moderate

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934). Non-security issues fixed: - Enable SAE support (jsc#SLE-14992). - Limit P2P_DEVICE name to appropriate ifname size. - Fix wicked wlan (bsc#1156920) - Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331) - With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331) - Fix WLAN config on boot with wicked. (bsc#1166933) - Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Changed service-files for start after network (systemd-networkd). This update was imported from the SUSE:SLE-15:Update update project.

Patchnames: openSUSE-2020-2059

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2015-4141

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-4142

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-4143

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-8041

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13077

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13082

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13086

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2018-14526

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-11555

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-13377

5.9 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-16275

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9494

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9495

6.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9497

3.1 (Low)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9498

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9499

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/o…	self
	https://lists.opensuse.org/archives/list/security…	self
	https://lists.opensuse.org/archives/list/security…	self
	https://bugzilla.suse.com/1131644	self
	https://bugzilla.suse.com/1131868	self
	https://bugzilla.suse.com/1131870	self
	https://bugzilla.suse.com/1131871	self
	https://bugzilla.suse.com/1131872	self
	https://bugzilla.suse.com/1131874	self
	https://bugzilla.suse.com/1133640	self
	https://bugzilla.suse.com/1144443	self
	https://bugzilla.suse.com/1150934	self
	https://bugzilla.suse.com/1156920	self
	https://bugzilla.suse.com/1166933	self
	https://bugzilla.suse.com/1167331	self
	https://bugzilla.suse.com/930077	self
	https://bugzilla.suse.com/930078	self
	https://bugzilla.suse.com/930079	self
	https://www.suse.com/security/cve/CVE-2015-4141/	self
	https://www.suse.com/security/cve/CVE-2015-4142/	self
	https://www.suse.com/security/cve/CVE-2015-4143/	self
	https://www.suse.com/security/cve/CVE-2015-8041/	self
	https://www.suse.com/security/cve/CVE-2017-13077/	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13082/	self
	https://www.suse.com/security/cve/CVE-2017-13086/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2018-14526/	self
	https://www.suse.com/security/cve/CVE-2019-11555/	self
	https://www.suse.com/security/cve/CVE-2019-13377/	self
	https://www.suse.com/security/cve/CVE-2019-16275/	self
	https://www.suse.com/security/cve/CVE-2019-9494/	self
	https://www.suse.com/security/cve/CVE-2019-9495/	self
	https://www.suse.com/security/cve/CVE-2019-9497/	self
	https://www.suse.com/security/cve/CVE-2019-9498/	self
	https://www.suse.com/security/cve/CVE-2019-9499/	self
	https://www.suse.com/security/cve/CVE-2015-4141	external
	https://bugzilla.suse.com/915323	external
	https://bugzilla.suse.com/930077	external
	https://www.suse.com/security/cve/CVE-2015-4142	external
	https://bugzilla.suse.com/915323	external
	https://bugzilla.suse.com/930078	external
	https://www.suse.com/security/cve/CVE-2015-4143	external
	https://bugzilla.suse.com/930079	external
	https://www.suse.com/security/cve/CVE-2015-8041	external
	https://bugzilla.suse.com/937419	external
	https://www.suse.com/security/cve/CVE-2017-13077	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063963	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13082	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13086	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2018-14526	external
	https://bugzilla.suse.com/1104205	external
	https://www.suse.com/security/cve/CVE-2019-11555	external
	https://bugzilla.suse.com/1133640	external
	https://www.suse.com/security/cve/CVE-2019-13377	external
	https://bugzilla.suse.com/1144443	external
	https://www.suse.com/security/cve/CVE-2019-16275	external
	https://bugzilla.suse.com/1150934	external
	https://www.suse.com/security/cve/CVE-2019-9494	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131868	external
	https://bugzilla.suse.com/1194732	external
	https://www.suse.com/security/cve/CVE-2019-9495	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131870	external
	https://bugzilla.suse.com/1194733	external
	https://www.suse.com/security/cve/CVE-2019-9497	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9498	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9499	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).\n\nNon-security issues fixed:\n\n- Enable SAE support (jsc#SLE-14992).\n- Limit P2P_DEVICE name to appropriate ifname size.\n- Fix wicked wlan (bsc#1156920)\n- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)\n- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)\n- Fix WLAN config on boot with wicked. (bsc#1166933)\n- Update to 2.9 release:\n   * SAE changes\n     - disable use of groups using Brainpool curves\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * EAP-pwd changes\n     - disable use of groups using Brainpool curves\n     - allow the set of groups to be configured (eap_pwd_groups)\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * fixed FT-EAP initial mobility domain association using PMKSA caching\n     (disabled by default for backwards compatibility; can be enabled\n     with ft_eap_pmksa_caching=1)\n   * fixed a regression in OpenSSL 1.1+ engine loading\n   * added validation of RSNE in (Re)Association Response frames\n   * fixed DPP bootstrapping URI parser of channel list\n   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n   * extended ca_cert_blob to support PEM format\n   * improved robustness of P2P Action frame scheduling\n   * added support for EAP-SIM/AKA using anonymous@realm identity\n   * fixed Hotspot 2.0 credential selection based on roaming consortium\n     to ignore credentials without a specific EAP method\n   * added experimental support for EAP-TEAP peer (RFC 7170)\n   * added experimental support for EAP-TLS peer with TLS v1.3\n   * fixed a regression in WMM parameter configuration for a TDLS peer\n   * fixed a regression in operation with drivers that offload 802.1X\n     4-way handshake\n   * fixed an ECDH operation corner case with OpenSSL\n   * SAE changes\n     - added support for SAE Password Identifier\n     - changed default configuration to enable only groups 19, 20, 21\n       (i.e., disable groups 25 and 26) and disable all unsuitable groups\n       completely based on REVmd changes\n     - do not regenerate PWE unnecessarily when the AP uses the\n       anti-clogging token mechanisms\n     - fixed some association cases where both SAE and FT-SAE were enabled\n       on both the station and the selected AP\n     - started to prefer FT-SAE over SAE AKM if both are enabled\n     - started to prefer FT-SAE over FT-PSK if both are enabled\n     - fixed FT-SAE when SAE PMKSA caching is used\n     - reject use of unsuitable groups based on new implementation guidance\n       in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n       groups with prime \u003e= 256)\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n   * EAP-pwd changes\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n     - verify server scalar/element\n       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n     - fix message reassembly issue with unexpected fragment\n       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n     - enforce rand,mask generation rules more strictly\n     - fix a memory leak in PWE derivation\n     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n       27)\n     - SAE/EAP-pwd side-channel attack update\n       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n   * Hotspot 2.0 changes\n     - do not indicate release number that is higher than the one\n       AP supports\n     - added support for release number 3\n     - enable PMF automatically for network profiles created from\n       credentials\n   * fixed OWE network profile saving\n   * fixed DPP network profile saving\n   * added support for RSN operating channel validation\n     (CONFIG_OCV=y and network profile parameter ocv=1)\n   * added Multi-AP backhaul STA support\n   * fixed build with LibreSSL\n   * number of MKA/MACsec fixes and extensions\n   * extended domain_match and domain_suffix_match to allow list of values\n   * fixed dNSName matching in domain_match and domain_suffix_match when\n     using wolfSSL\n   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n     are enabled\n   * extended nl80211 Connect and external authentication to support\n     SAE, FT-SAE, FT-EAP-SHA384\n   * fixed KEK2 derivation for FILS+FT\n   * extended client_cert file to allow loading of a chain of PEM\n     encoded certificates\n   * extended beacon reporting functionality\n   * extended D-Bus interface with number of new properties\n   * fixed a regression in FT-over-DS with mac80211-based drivers\n   * OpenSSL: allow systemwide policies to be overridden\n   * extended driver flags indication for separate 802.1X and PSK\n     4-way handshake offload capability\n   * added support for random P2P Device/Interface Address use\n   * extended PEAP to derive EMSK to enable use with ERP/FILS\n   * extended WPS to allow SAE configuration to be added automatically\n     for PSK (wps_cred_add_sae=1)\n   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n   * extended domain_match and domain_suffix_match to allow list of values\n   * added a RSN workaround for misbehaving PMF APs that advertise\n     IGTK/BIP KeyID using incorrect byte order\n   * fixed PTK rekeying with FILS and FT\n   * fixed WPA packet number reuse with replayed messages and key\n     reinstallation\n     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n     [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n   * added support for FILS (IEEE 802.11ai) shared key authentication\n   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n     and transition mode defined by WFA)\n   * added support for DPP (Wi-Fi Device Provisioning Protocol)\n   * added support for RSA 3k key case with Suite B 192-bit level\n   * fixed Suite B PMKSA caching not to update PMKID during each 4-way\n     handshake\n   * fixed EAP-pwd pre-processing with PasswordHashHash\n   * added EAP-pwd client support for salted passwords\n   * fixed a regression in TDLS prohibited bit validation\n   * started to use estimated throughput to avoid undesired signal\n     strength based roaming decision\n   * MACsec/MKA:\n     - new macsec_linux driver interface support for the Linux\n       kernel macsec module\n     - number of fixes and extensions\n   * added support for external persistent storage of PMKSA cache\n     (PMKSA_GET/PMKSA_ADD control interface commands; and\n      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n   * fixed mesh channel configuration pri/sec switch case\n   * added support for beacon report\n   * large number of other fixes, cleanup, and extensions\n   * added support for randomizing local address for GAS queries\n     (gas_rand_mac_addr parameter)\n   * fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n   * added option for using random WPS UUID (auto_uuid=1)\n   * added SHA256-hash support for OCSP certificate matching\n   * fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n   * fixed a regression in RSN pre-authentication candidate selection\n   * added option to configure allowed group management cipher suites\n     (group_mgmt network profile parameter)\n   * removed all PeerKey functionality\n   * fixed nl80211 AP and mesh mode configuration regression with\n     Linux 4.15 and newer\n   * added ap_isolate configuration option for AP mode\n   * added support for nl80211 to offload 4-way handshake into the driver\n   * added support for using wolfSSL cryptographic library\n   * SAE\n     - added support for configuring SAE password separately of the\n       WPA2 PSK/passphrase\n     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n       for SAE;\n       note: this is not backwards compatible, i.e., both the AP and\n       station side implementations will need to be update at the same\n       time to maintain interoperability\n     - added support for Password Identifier\n     - fixed FT-SAE PMKID matching\n   * Hotspot 2.0\n     - added support for fetching of Operator Icon Metadata ANQP-element\n     - added support for Roaming Consortium Selection element\n     - added support for Terms and Conditions\n     - added support for OSEN connection in a shared RSN BSS\n     - added support for fetching Venue URL information\n   * added support for using OpenSSL 1.1.1\n   * FT\n     - disabled PMKSA caching with FT since it is not fully functional\n     - added support for SHA384 based AKM\n     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n     - fixed additional IE inclusion in Reassociation Request frame when\n       using FT protocol\n\n- Changed service-files for start after network (systemd-networkd).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-2059",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2059-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:2059-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:2059-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150934",
        "url": "https://bugzilla.suse.com/1150934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930077",
        "url": "https://bugzilla.suse.com/930077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930078",
        "url": "https://bugzilla.suse.com/930078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930079",
        "url": "https://bugzilla.suse.com/930079"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4141 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4142 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4143 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16275 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2020-11-27T05:23:21Z",
      "generator": {
        "date": "2020-11-27T05:23:21Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:2059-1",
      "initial_release_date": "2020-11-27T05:23:21Z",
      "revision_history": [
        {
          "date": "2020-11-27T05:23:21Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp152.8.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-lp152.8.3.1.i586",
                  "product_id": "wpa_supplicant-2.9-lp152.8.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp152.8.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-lp152.8.3.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-lp152.8.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp152.8.3.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586"
        },
        "product_reference": "wpa_supplicant-2.9-lp152.8.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp152.8.3.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-lp152.8.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4141",
          "url": "https://www.suse.com/security/cve/CVE-2015-4141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930077 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/930077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4141"
    },
    {
      "cve": "CVE-2015-4142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4142",
          "url": "https://www.suse.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930078 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/930078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4142"
    },
    {
      "cve": "CVE-2015-4143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4143",
          "url": "https://www.suse.com/security/cve/CVE-2015-4143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930079 for CVE-2015-4143",
          "url": "https://bugzilla.suse.com/930079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4143"
    },
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-16275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16275",
          "url": "https://www.suse.com/security/cve/CVE-2019-16275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150934 for CVE-2019-16275",
          "url": "https://bugzilla.suse.com/1150934"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16275"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    }
  ]
}

OPENSUSE-SU-2020:2053-1

Vulnerability from csaf_opensuse - Published: 2020-11-26 17:28 - Updated: 2020-11-26 17:28

Summary

Security update for wpa_supplicant

Severity

Moderate

Notes

Title of the patch: Security update for wpa_supplicant

Description of the patch: This update for wpa_supplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934). Non-security issues fixed: - Enable SAE support (jsc#SLE-14992). - Limit P2P_DEVICE name to appropriate ifname size. - Fix wicked wlan (bsc#1156920) - Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331) - With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331) - Fix WLAN config on boot with wicked. (bsc#1166933) - Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Changed service-files for start after network (systemd-networkd). This update was imported from the SUSE:SLE-15:Update update project.

Patchnames: openSUSE-2020-2053

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2015-4141

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-4142

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-4143

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-8041

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13077

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13078

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13079

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13080

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13081

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13082

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13086

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13087

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2017-13088

8.1 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2018-14526

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-11555

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-13377

5.9 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-16275

4.3 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9494

5.9 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9495

6.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9497

3.1 (Low)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9498

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2019-9499

6.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/o…	self
	https://lists.opensuse.org/archives/list/security…	self
	https://lists.opensuse.org/archives/list/security…	self
	https://bugzilla.suse.com/1131644	self
	https://bugzilla.suse.com/1131868	self
	https://bugzilla.suse.com/1131870	self
	https://bugzilla.suse.com/1131871	self
	https://bugzilla.suse.com/1131872	self
	https://bugzilla.suse.com/1131874	self
	https://bugzilla.suse.com/1133640	self
	https://bugzilla.suse.com/1144443	self
	https://bugzilla.suse.com/1150934	self
	https://bugzilla.suse.com/1156920	self
	https://bugzilla.suse.com/1166933	self
	https://bugzilla.suse.com/1167331	self
	https://bugzilla.suse.com/930077	self
	https://bugzilla.suse.com/930078	self
	https://bugzilla.suse.com/930079	self
	https://www.suse.com/security/cve/CVE-2015-4141/	self
	https://www.suse.com/security/cve/CVE-2015-4142/	self
	https://www.suse.com/security/cve/CVE-2015-4143/	self
	https://www.suse.com/security/cve/CVE-2015-8041/	self
	https://www.suse.com/security/cve/CVE-2017-13077/	self
	https://www.suse.com/security/cve/CVE-2017-13078/	self
	https://www.suse.com/security/cve/CVE-2017-13079/	self
	https://www.suse.com/security/cve/CVE-2017-13080/	self
	https://www.suse.com/security/cve/CVE-2017-13081/	self
	https://www.suse.com/security/cve/CVE-2017-13082/	self
	https://www.suse.com/security/cve/CVE-2017-13086/	self
	https://www.suse.com/security/cve/CVE-2017-13087/	self
	https://www.suse.com/security/cve/CVE-2017-13088/	self
	https://www.suse.com/security/cve/CVE-2018-14526/	self
	https://www.suse.com/security/cve/CVE-2019-11555/	self
	https://www.suse.com/security/cve/CVE-2019-13377/	self
	https://www.suse.com/security/cve/CVE-2019-16275/	self
	https://www.suse.com/security/cve/CVE-2019-9494/	self
	https://www.suse.com/security/cve/CVE-2019-9495/	self
	https://www.suse.com/security/cve/CVE-2019-9497/	self
	https://www.suse.com/security/cve/CVE-2019-9498/	self
	https://www.suse.com/security/cve/CVE-2019-9499/	self
	https://www.suse.com/security/cve/CVE-2015-4141	external
	https://bugzilla.suse.com/915323	external
	https://bugzilla.suse.com/930077	external
	https://www.suse.com/security/cve/CVE-2015-4142	external
	https://bugzilla.suse.com/915323	external
	https://bugzilla.suse.com/930078	external
	https://www.suse.com/security/cve/CVE-2015-4143	external
	https://bugzilla.suse.com/930079	external
	https://www.suse.com/security/cve/CVE-2015-8041	external
	https://bugzilla.suse.com/937419	external
	https://www.suse.com/security/cve/CVE-2017-13077	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063963	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13078	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13079	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13080	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1063667	external
	https://bugzilla.suse.com/1063671	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1178872	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13081	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1066295	external
	https://bugzilla.suse.com/1105108	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13082	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13086	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13087	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2017-13088	external
	https://bugzilla.suse.com/1056061	external
	https://bugzilla.suse.com/1063479	external
	https://bugzilla.suse.com/1179588	external
	https://www.suse.com/security/cve/CVE-2018-14526	external
	https://bugzilla.suse.com/1104205	external
	https://www.suse.com/security/cve/CVE-2019-11555	external
	https://bugzilla.suse.com/1133640	external
	https://www.suse.com/security/cve/CVE-2019-13377	external
	https://bugzilla.suse.com/1144443	external
	https://www.suse.com/security/cve/CVE-2019-16275	external
	https://bugzilla.suse.com/1150934	external
	https://www.suse.com/security/cve/CVE-2019-9494	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131868	external
	https://bugzilla.suse.com/1194732	external
	https://www.suse.com/security/cve/CVE-2019-9495	external
	https://bugzilla.suse.com/1131291	external
	https://bugzilla.suse.com/1131870	external
	https://bugzilla.suse.com/1194733	external
	https://www.suse.com/security/cve/CVE-2019-9497	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9498	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external
	https://www.suse.com/security/cve/CVE-2019-9499	external
	https://bugzilla.suse.com/1131871	external
	https://bugzilla.suse.com/1131872	external
	https://bugzilla.suse.com/1131874	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).\n\nNon-security issues fixed:\n\n- Enable SAE support (jsc#SLE-14992).\n- Limit P2P_DEVICE name to appropriate ifname size.\n- Fix wicked wlan (bsc#1156920)\n- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)\n- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)\n- Fix WLAN config on boot with wicked. (bsc#1166933)\n- Update to 2.9 release:\n   * SAE changes\n     - disable use of groups using Brainpool curves\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * EAP-pwd changes\n     - disable use of groups using Brainpool curves\n     - allow the set of groups to be configured (eap_pwd_groups)\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * fixed FT-EAP initial mobility domain association using PMKSA caching\n     (disabled by default for backwards compatibility; can be enabled\n     with ft_eap_pmksa_caching=1)\n   * fixed a regression in OpenSSL 1.1+ engine loading\n   * added validation of RSNE in (Re)Association Response frames\n   * fixed DPP bootstrapping URI parser of channel list\n   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n   * extended ca_cert_blob to support PEM format\n   * improved robustness of P2P Action frame scheduling\n   * added support for EAP-SIM/AKA using anonymous@realm identity\n   * fixed Hotspot 2.0 credential selection based on roaming consortium\n     to ignore credentials without a specific EAP method\n   * added experimental support for EAP-TEAP peer (RFC 7170)\n   * added experimental support for EAP-TLS peer with TLS v1.3\n   * fixed a regression in WMM parameter configuration for a TDLS peer\n   * fixed a regression in operation with drivers that offload 802.1X\n     4-way handshake\n   * fixed an ECDH operation corner case with OpenSSL\n   * SAE changes\n     - added support for SAE Password Identifier\n     - changed default configuration to enable only groups 19, 20, 21\n       (i.e., disable groups 25 and 26) and disable all unsuitable groups\n       completely based on REVmd changes\n     - do not regenerate PWE unnecessarily when the AP uses the\n       anti-clogging token mechanisms\n     - fixed some association cases where both SAE and FT-SAE were enabled\n       on both the station and the selected AP\n     - started to prefer FT-SAE over SAE AKM if both are enabled\n     - started to prefer FT-SAE over FT-PSK if both are enabled\n     - fixed FT-SAE when SAE PMKSA caching is used\n     - reject use of unsuitable groups based on new implementation guidance\n       in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n       groups with prime \u003e= 256)\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n   * EAP-pwd changes\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n     - verify server scalar/element\n       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n     - fix message reassembly issue with unexpected fragment\n       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n     - enforce rand,mask generation rules more strictly\n     - fix a memory leak in PWE derivation\n     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n       27)\n     - SAE/EAP-pwd side-channel attack update\n       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n   * Hotspot 2.0 changes\n     - do not indicate release number that is higher than the one\n       AP supports\n     - added support for release number 3\n     - enable PMF automatically for network profiles created from\n       credentials\n   * fixed OWE network profile saving\n   * fixed DPP network profile saving\n   * added support for RSN operating channel validation\n     (CONFIG_OCV=y and network profile parameter ocv=1)\n   * added Multi-AP backhaul STA support\n   * fixed build with LibreSSL\n   * number of MKA/MACsec fixes and extensions\n   * extended domain_match and domain_suffix_match to allow list of values\n   * fixed dNSName matching in domain_match and domain_suffix_match when\n     using wolfSSL\n   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n     are enabled\n   * extended nl80211 Connect and external authentication to support\n     SAE, FT-SAE, FT-EAP-SHA384\n   * fixed KEK2 derivation for FILS+FT\n   * extended client_cert file to allow loading of a chain of PEM\n     encoded certificates\n   * extended beacon reporting functionality\n   * extended D-Bus interface with number of new properties\n   * fixed a regression in FT-over-DS with mac80211-based drivers\n   * OpenSSL: allow systemwide policies to be overridden\n   * extended driver flags indication for separate 802.1X and PSK\n     4-way handshake offload capability\n   * added support for random P2P Device/Interface Address use\n   * extended PEAP to derive EMSK to enable use with ERP/FILS\n   * extended WPS to allow SAE configuration to be added automatically\n     for PSK (wps_cred_add_sae=1)\n   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n   * extended domain_match and domain_suffix_match to allow list of values\n   * added a RSN workaround for misbehaving PMF APs that advertise\n     IGTK/BIP KeyID using incorrect byte order\n   * fixed PTK rekeying with FILS and FT\n   * fixed WPA packet number reuse with replayed messages and key\n     reinstallation\n     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n     [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n   * added support for FILS (IEEE 802.11ai) shared key authentication\n   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n     and transition mode defined by WFA)\n   * added support for DPP (Wi-Fi Device Provisioning Protocol)\n   * added support for RSA 3k key case with Suite B 192-bit level\n   * fixed Suite B PMKSA caching not to update PMKID during each 4-way\n     handshake\n   * fixed EAP-pwd pre-processing with PasswordHashHash\n   * added EAP-pwd client support for salted passwords\n   * fixed a regression in TDLS prohibited bit validation\n   * started to use estimated throughput to avoid undesired signal\n     strength based roaming decision\n   * MACsec/MKA:\n     - new macsec_linux driver interface support for the Linux\n       kernel macsec module\n     - number of fixes and extensions\n   * added support for external persistent storage of PMKSA cache\n     (PMKSA_GET/PMKSA_ADD control interface commands; and\n      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n   * fixed mesh channel configuration pri/sec switch case\n   * added support for beacon report\n   * large number of other fixes, cleanup, and extensions\n   * added support for randomizing local address for GAS queries\n     (gas_rand_mac_addr parameter)\n   * fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n   * added option for using random WPS UUID (auto_uuid=1)\n   * added SHA256-hash support for OCSP certificate matching\n   * fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n   * fixed a regression in RSN pre-authentication candidate selection\n   * added option to configure allowed group management cipher suites\n     (group_mgmt network profile parameter)\n   * removed all PeerKey functionality\n   * fixed nl80211 AP and mesh mode configuration regression with\n     Linux 4.15 and newer\n   * added ap_isolate configuration option for AP mode\n   * added support for nl80211 to offload 4-way handshake into the driver\n   * added support for using wolfSSL cryptographic library\n   * SAE\n     - added support for configuring SAE password separately of the\n       WPA2 PSK/passphrase\n     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n       for SAE;\n       note: this is not backwards compatible, i.e., both the AP and\n       station side implementations will need to be update at the same\n       time to maintain interoperability\n     - added support for Password Identifier\n     - fixed FT-SAE PMKID matching\n   * Hotspot 2.0\n     - added support for fetching of Operator Icon Metadata ANQP-element\n     - added support for Roaming Consortium Selection element\n     - added support for Terms and Conditions\n     - added support for OSEN connection in a shared RSN BSS\n     - added support for fetching Venue URL information\n   * added support for using OpenSSL 1.1.1\n   * FT\n     - disabled PMKSA caching with FT since it is not fully functional\n     - added support for SHA384 based AKM\n     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n     - fixed additional IE inclusion in Reassociation Request frame when\n       using FT protocol\n\n- Changed service-files for start after network (systemd-networkd).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-2053",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2053-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:2053-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:2053-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150934",
        "url": "https://bugzilla.suse.com/1150934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930077",
        "url": "https://bugzilla.suse.com/930077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930078",
        "url": "https://bugzilla.suse.com/930078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930079",
        "url": "https://bugzilla.suse.com/930079"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4141 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4142 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4143 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16275 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2020-11-26T17:28:36Z",
      "generator": {
        "date": "2020-11-26T17:28:36Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:2053-1",
      "initial_release_date": "2020-11-26T17:28:36Z",
      "revision_history": [
        {
          "date": "2020-11-26T17:28:36Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp151.5.10.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-lp151.5.10.1.i586",
                  "product_id": "wpa_supplicant-2.9-lp151.5.10.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp151.5.10.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-lp151.5.10.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-lp151.5.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp151.5.10.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586"
        },
        "product_reference": "wpa_supplicant-2.9-lp151.5.10.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp151.5.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-lp151.5.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4141",
          "url": "https://www.suse.com/security/cve/CVE-2015-4141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930077 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/930077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4141"
    },
    {
      "cve": "CVE-2015-4142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4142",
          "url": "https://www.suse.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930078 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/930078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4142"
    },
    {
      "cve": "CVE-2015-4143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4143",
          "url": "https://www.suse.com/security/cve/CVE-2015-4143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930079 for CVE-2015-4143",
          "url": "https://bugzilla.suse.com/930079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4143"
    },
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-16275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16275",
          "url": "https://www.suse.com/security/cve/CVE-2019-16275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150934 for CVE-2019-16275",
          "url": "https://bugzilla.suse.com/1150934"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16275"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    }
  ]
}

CVE-2017-13088 (GCVE-0-2017-13088)

Tags

Sightings

Nomenclature

Action not permitted

CVE-2017-13088 (GCVE-0-2017-13088)

Solution

Solution

Solution

Solution

Solution

Solution

Solution

Solution

wpa vulnerabilities

upgradepkg wpa_supplicant-2.6-i586-1_slack14.2.txz

freebsd-update fetch

freebsd-update install

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-11.patch.asc

gpg --verify wpa-11.patch.asc

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch

fetch https://security.FreeBSD.org/patches/SA-17:07/wpa-10.patch.asc

gpg --verify wpa-10.patch.asc

cd /usr/src

patch < /path/to/patch

svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Tags

Sightings

Nomenclature