RSS   Podatności dla 'Mac80211'   RSS

2021-05-11
 
CVE-2020-24586

NVD-CWE-Other
 
 
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

 
 
CVE-2020-24587

CWE-326
 
 
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

 
 
CVE-2020-24588

CWE-306
 
 
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

 

 >>> Vendor: Linux 15 Produkty
Linux kernel
Kernel
Audit
Util-linux
Direct connect
Ipsec tools racoon daemon
Systemd
Linux kernel-rt
Linux kernel i40e/i40evf
Linux kernel ixgbe
ACRN
Dhcp6c
Infiniband hfi1 driver
Mac80211
Tizen

Copyright 2024, cxsecurity.com

 

Back to Top