CVE-2020-26146 - log back

CVE-2020-26146 edited at 03 Jun 2021 13:43:44
Description
- A security issue has been found in the IEEE 802.11 implementation (mac80211) of the Linux kernel. Encrypted fragments with non-consecutive packet numbers are reassembled.
+ An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.
References
https://www.openwall.com/lists/oss-security/2021/05/11/12
https://papers.mathyvanhoef.com/usenix2021.pdf
https://www.fragattacks.com/
- https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/
CVE-2020-26146 edited at 11 May 2021 18:58:47
Description
- A security issue has been found in the ath10k and ath11k wireless drivers of the Linux kernel. Encrypted fragments with non-consecutive packet numbers are reassembled.
+ A security issue has been found in the IEEE 802.11 implementation (mac80211) of the Linux kernel. Encrypted fragments with non-consecutive packet numbers are reassembled.
References
https://www.openwall.com/lists/oss-security/2021/05/11/12
https://papers.mathyvanhoef.com/usenix2021.pdf
https://www.fragattacks.com/
https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/
CVE-2020-26146 edited at 11 May 2021 18:50:22
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Insufficient validation
Description
+ A security issue has been found in the ath10k and ath11k wireless drivers of the Linux kernel. Encrypted fragments with non-consecutive packet numbers are reassembled.
References
+ https://www.openwall.com/lists/oss-security/2021/05/11/12
+ https://papers.mathyvanhoef.com/usenix2021.pdf
+ https://www.fragattacks.com/
+ https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/
CVE-2020-26146 created at 11 May 2021 18:39:39
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes