CVE:CVE-2017-13077
CNNVD:CNNVD-201710-380
WPA和WPA2都是美国Wi-Fi联盟（Wi-Fi Alliance）的一套Wi-Fi访问保护方案，包括安全协议和安全认证程序。
多个厂商提供的WiFi产品中的WPA和WPA2存在安全漏洞。攻击者可利用该漏洞在四次握手中重新安装成对加密密钥（PTK-TK），重播、解密或伪造帧。以下产商提供的产品受到影响：Aruba Networks；Cisco；Espressif Systems；Fortinet, Inc.；FreeBSD Project；Google；HostAP；Intel Corporation；Juniper Networks；Microchip Technology；Microsoft Corporation；OpenBSD；Peplink；Red Hat, Inc；Samsung Mobile。更多详情请查看参考链接。
solution:Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.04,and avoid the version 14.04,16.04,17.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade freebsd freebsd to a higher version than *,10,10.4,11,11.1,and avoid the version 10,10.4,11,11.1; Upgrade opensuse leap to a higher version than 42.2,42.3,and avoid the version 42.2,42.3; Upgrade redhat enterprise_linux_desktop to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_server to a higher version than 7,and avoid the version 7; Upgrade w1.fi hostapd to a higher version than 0.2.4,0.2.5,0.2.6,0.2.8,0.3.7,0.3.9,0.3.10,0.3.11,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.6.8,0.6.9,0.6.10,0.7.3,1.0,1.1,2.0,2.1,2.2,2.3,2.4,2.5,2.6,and avoid the version 0.2.4,0.2.5,0.2.6,0.2.8,0.3.7,0.3.9,0.3.10,0.3.11,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.6.8,0.6.9,0.6.10,0.7.3,1.0,1.1,2.0,2.1,2.2,2.3,2.4,2.5,2.6; Upgrade w1.fi wpa_supplicant to a higher version than 0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.3.7,0.3.8,0.3.9,0.3.10,0.3.11,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.6.8,0.6.9,0.6.10,0.7.3,1.0,1.1,2.0,2.1,2.2,2.3,2.4,2.5,2.6,and avoid the version 0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.3.7,0.3.8,0.3.9,0.3.10,0.3.11,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.6.8,0.6.9,0.6.10,0.7.3,1.0,1.1,2.0,2.1,2.2,2.3,2.4,2.5,2.6; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp2,12:sp3,and avoid the version 12:sp2,12:sp3; Upgrade suse linux_enterprise_point_of_sale to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,11:sp4,12,and avoid the version 11:sp3,11:sp4,12; Upgrade suse openstack_cloud to a higher version than 6,and avoid the version 6