CVE-2020-26147 Information

Description

An issue was discovered in the Linux kernel 5.8.9. The WEP WPA WPA2 and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP CCMP or GCMP data-confidentiality protocol is used.

CVSS Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N

Reference

https://www.fragattacks.com https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md http://www.openwall.com/lists/oss-security/2021/05/11/12 https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

HIGH

Base Score

NONE

Base Severity

5.4