vulnerability

Alpine Linux: CVE-2017-13088: Reusing a Nonce, Key Pair in Encryption

Severity
3
CVSS
(AV:A/AC:M/Au:N/C:N/I:P/A:N)
Published
Oct 17, 2017
Added
Aug 22, 2024
Modified
Aug 8, 2025

Description

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

Solutions

alpine-linux-upgrade-hostapdalpine-linux-upgrade-wpa_supplicant
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.