CVE-2017-13079

CVE-2017-13079 is a medium-severity vulnerability affecting Wi-Fi Protected Access (WPA and WPA2) implementations that support IEEE 802.11w, impacting various operating systems and vendors including Canonical, Debian, and Red Hat. This flaw allows an attacker within radio range to spoof frames from access points to clients by reinstalling the Integrity Group Temporal Key (IGTK) during the four-way handshake. While the attack complexity is high and user interaction is not required, successful exploitation could lead to high integrity impacts, though confidentiality and availability are not affected. There is no evidence of active exploitation, and no public exploit code is available in Metasploit or ExploitDB, despite significant community discussion and media coverage as part of the broader "KRACK Attack" disclosures.