CVE-2017-13086: Canonical Ubuntu Linux

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 17.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Freebsd Freebsd: any version; version 10 only; version 10.4 only; version 11 only; version 11.1 only
• Opensuse Leap: version 42.2 only; version 42.3 only
• Red Hat Enterprise Linux Desktop: version 7 only
• Red Hat Enterprise Linux Server: version 7 only
• Suse Linux Enterprise Desktop: version 12 only
• Suse Linux Enterprise Point Of Sale: version 11 only
• Suse Linux Enterprise Server: version 11 only; version 12 only
• Suse Openstack Cloud: version 6 only
• w1.fi Hostapd: version 0.2.4 only; version 0.2.5 only; version 0.2.6 only; version 0.2.8 only; version 0.3.7 only; version 0.3.9 only; …
• w1.fi Wpa Supplicant: version 0.2.4 only; version 0.2.5 only; version 0.2.6 only; version 0.2.7 only; version 0.2.8 only; version 0.3.7 only; …

Published 2017-10-17. Last modified 2026-06-17.