CVE-2017-13082 - log back

CVE-2017-13082 created at 25 Sep 2019 19:31:40
Severity
+ High
Remote
+ Remote
Type
+ Man-in-the-middle
Description
+ A vulnerability has been discovered that allows accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key (PTK) while processing it.
References
+ https://w1.fi/cgit/hostap/commit/?id=0e3bd7ac684a2289aa613347e2f3ad54ad6a9449
+ https://w1.fi/cgit/hostap/commit/?id=e760851176c77ae6de19821bb1d5bf3ae2cb5187
+ https://w1.fi/cgit/hostap/commit/?id=2a9c5217b18be9462a5329626e2f95cc7dd8d4f1
Notes