exploitDog

CVE-2020-26147

Опубликовано: 11 мая 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.2

EPSS Низкий

Описание

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

Ссылки

http://www.openwall.com/lists/oss-security/2021/05/11/12
Mailing List
Patch
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Mailing List
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
Third Party Advisory
https://www.fragattacks.com
Product
http://www.openwall.com/lists/oss-security/2021/05/11/12
Mailing List
Patch
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Mailing List
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
Third Party Advisory
https://www.fragattacks.com
Product

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.4 (включая) до 4.4.271 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.9 (включая) до 4.9.271 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.14 (включая) до 4.14.235 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.19 (включая) до 4.19.193 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.4 (включая) до 5.4.124 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.10 (включая) до 5.10.42 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.12 (включая) до 5.12.9 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:arista:c-75_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arista:c-75:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:arista:o-90_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arista:o-90:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:arista:c-65_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arista:c-65:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:arista:w-68_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arista:w-68:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_w700_ieee_802.11n:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:siemens:scalance_w1700_ieee_802.11ac_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_w1700_ieee_802.11ac:-:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00478

Низкий

5.4 Medium

CVSS3

3.2 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2020-26147

CVSS3: 5.4

ubuntu

больше 4 лет назад

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

CVE-2020-26147

CVSS3: 5.4

redhat

больше 4 лет назад

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

CVE-2020-26147

CVSS3: 5.4

debian

больше 4 лет назад

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, ...

GHSA-f393-4p85-6h6g

CVSS3: 5.4

github

больше 3 лет назад

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

BDU:2021-03177

CVSS3: 5.4

fstec

больше 4 лет назад

Уязвимость реализации алгоритмов WEP, WPA, WPA2 и WPA3 ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 64%

0.00478

Низкий

5.4 Medium

CVSS3

3.2 Low

CVSS2

Дефекты

NVD-CWE-Other