---

CVE-2020-26147 - log back

CVE-2020-26147 edited at 03 Jun 2021 14:12:37
References	https://www.openwall.com/lists/oss-security/2021/05/11/12 https://papers.mathyvanhoef.com/usenix2021.pdf https://www.fragattacks.com/ https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.12.9&id=083ecdde0e861bed1189be90d83b0297f4135e78 + https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.42&id=f7829b014bb670a77f6f66d265b058534367d04b

CVE-2020-26147 edited at 03 Jun 2021 13:51:03

Description

- An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. + An issue was discovered in the Linux kernel before version 5.12.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

CVE-2020-26147 edited at 03 Jun 2021 13:44:31
Description	- A security issue has been found in the IEEE 802.11 implementation (mac80211) of the Linux kernel. Mixed encrypted/plaintext fragments are reassembled. + An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
References	https://www.openwall.com/lists/oss-security/2021/05/11/12 https://papers.mathyvanhoef.com/usenix2021.pdf https://www.fragattacks.com/ + https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.12.9&id=083ecdde0e861bed1189be90d83b0297f4135e78 - https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/ - https://lore.kernel.org/linux-wireless/20210511200110.30c4394bb835.I5acfdb552cc1d20c339c262315950b3eac491397@changeid/

CVE-2020-26147 edited at 11 May 2021 18:58:53
Description	- A security issue has been found in the ath10k and ath11k wireless drivers of the Linux kernel. Mixed encrypted/plaintext fragments are reassembled. + A security issue has been found in the IEEE 802.11 implementation (mac80211) of the Linux kernel. Mixed encrypted/plaintext fragments are reassembled.

CVE-2020-26147 edited at 11 May 2021 18:52:12
References	https://www.openwall.com/lists/oss-security/2021/05/11/12 https://papers.mathyvanhoef.com/usenix2021.pdf https://www.fragattacks.com/ https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/ + https://lore.kernel.org/linux-wireless/20210511200110.30c4394bb835.I5acfdb552cc1d20c339c262315950b3eac491397@changeid/

CVE-2020-26147 edited at 11 May 2021 18:50:45
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Insufficient validation
Description	+ A security issue has been found in the ath10k and ath11k wireless drivers of the Linux kernel. Mixed encrypted/plaintext fragments are reassembled.
References	+ https://www.openwall.com/lists/oss-security/2021/05/11/12 + https://papers.mathyvanhoef.com/usenix2021.pdf + https://www.fragattacks.com/ + https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/

CVE-2020-26147 created at 11 May 2021 18:39:39
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes