RSS   Vulnerabilities for 'Mac80211'   RSS

2021-05-11
 
CVE-2020-24586

NVD-CWE-Other
 

 
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

 
 
CVE-2020-24587

CWE-326
 

 
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

 
 
CVE-2020-24588

CWE-306
 

 
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

 

 >>> Vendor: Linux 15 Products
Linux kernel
Util-linux
Direct connect
Kernel
Audit
Ipsec tools racoon daemon
Systemd
Linux kernel-rt
Linux kernel i40e/i40evf
Linux kernel ixgbe
ACRN
Dhcp6c
Infiniband hfi1 driver
Mac80211
Tizen


Copyright 2024, cxsecurity.com

 

Back to Top