Vulnerability Description
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.4, < 4.4.271 |
| Debian | Debian Linux | 9.0 |
| Arista | C-75 Firmware | - |
| Arista | C-75 | - |
| Arista | O-90 Firmware | - |
| Arista | O-90 | - |
| Arista | C-65 Firmware | - |
| Arista | C-65 | - |
| Arista | W-68 Firmware | - |
| Arista | W-68 | - |
| Siemens | Scalance W700 Ieee 802.11N Firmware | All versions |
| Siemens | Scalance W700 Ieee 802.11N | - |
| Siemens | Scalance W1700 Ieee 802.11Ac Firmware | All versions |
| Siemens | Scalance W1700 Ieee 802.11Ac | - |
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing ListPatchThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-sThird Party Advisory
- https://www.fragattacks.comProduct
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing ListPatchThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-sThird Party Advisory
FAQ
What is CVE-2020-26147?
CVE-2020-26147 is a vulnerability with a CVSS score of 5.4 (MEDIUM). An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused t...
How severe is CVE-2020-26147?
CVE-2020-26147 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-26147?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux, Arista C-75 Firmware, Arista C-75, Arista O-90 Firmware.