SUSE-SU-2017:3106-1

    Dashboard / Vulnerabilities / SUSE-SU-2017:3106-1

    SUSE-SU-2017:3106-1

    Published: 27 Nov 2017Last Modified: 4 Feb 2026

    Summary: Security update for kernel-firmware

    Details: This update for kernel-firmware fixes the following issues: - Update Intel WiFi firmwares for the 3160, 7260 and 7265 adapters. Security issues fixed are part of the 'KRACK' attacks affecting the firmware: - CVE-2017-13080: The reinstallation of the Group Temporal key could be used for replay attacks (bsc#1066295): - CVE-2017-13081: The reinstallation of the Integrity Group Temporal key could be used for replay attacks (bsc#1066295):

    References: https://www.suse.com/support/update/announcement/2017/suse-su-20173106-1/, https://bugzilla.suse.com/1066295, https://www.suse.com/security/cve/CVE-2017-13080, https://www.suse.com/security/cve/CVE-2017-13081

    Affected packages

    Package

    Name: kernel-firmware

    Purl: pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -20170530-21.13.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High