Vulnerability CVE-2020-24586: Information

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

Severity: LOW (3.5) Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-24586
Published: May 11, 2021
Modified: April 2, 2023

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-mpsisyphus4.20.4-alt16.8.8-alt1ALT-PU-2019-1139-1220078Fixed
kernel-image-mpp104.20.4-alt16.1.19-alt1ALT-PU-2019-1139-1220078Fixed
kernel-image-mpp95.11.16-alt15.12.16-alt1ALT-PU-2021-1869-1271829Fixed
kernel-image-mpp114.20.4-alt16.8.8-alt1ALT-PU-2019-1139-1220078Fixed
kernel-image-rpi-defsisyphus5.10.50-alt15.15.92-alt2ALT-PU-2021-2293-1279852Fixed
kernel-image-rpi-defp105.10.50-alt15.15.92-alt2ALT-PU-2021-2305-1279938Fixed
kernel-image-rpi-defp95.10.50-alt15.10.81-alt1ALT-PU-2021-2307-1279906Fixed
kernel-image-rpi-defp115.10.50-alt15.15.92-alt2ALT-PU-2021-2293-1279852Fixed
kernel-image-rpi-unsisyphus5.12.17-alt16.6.23-alt1ALT-PU-2021-2315-1280530Fixed
kernel-image-rpi-unp105.12.17-alt16.1.77-alt1ALT-PU-2021-2326-1280547Fixed
kernel-image-rpi-unp95.12.17-alt15.12.17-alt1ALT-PU-2021-2330-1280546Fixed
kernel-image-rpi-unp115.12.17-alt16.6.23-alt1ALT-PU-2021-2315-1280530Fixed
kernel-image-rtsisyphus5.10.47-alt1.rt456.1.92-alt1.rt32ALT-PU-2021-2165-1277492Fixed
kernel-image-rtp105.10.47-alt1.rt455.10.217-alt1.rt109ALT-PU-2021-2165-1277492Fixed
kernel-image-rtc9f24.19.199-alt1.rt864.19.199-alt2.rt86ALT-PU-2021-2671-1283461Fixed
kernel-image-rtp115.10.47-alt1.rt456.1.90-alt2.rt30ALT-PU-2021-2165-1277492Fixed
kernel-image-std-debugsisyphus5.10.54-alt16.1.92-alt1ALT-PU-2021-2370-1281272Fixed
kernel-image-std-debugp115.10.54-alt16.1.91-alt1ALT-PU-2021-2370-1281272Fixed
kernel-image-std-defsisyphus5.10.42-alt16.1.92-alt1ALT-PU-2021-1917-1273495Fixed
kernel-image-std-defp105.10.42-alt15.10.217-alt1ALT-PU-2021-1917-1273495Fixed
kernel-image-std-defp95.4.124-alt15.4.275-alt1ALT-PU-2021-1948-1273491Fixed
kernel-image-std-defp84.9.271-alt0.M80P.14.9.337-alt0.M80P.1ALT-PU-2021-1951-1273502Fixed
kernel-image-std-defc9f25.10.42-alt0.c9f5.10.214-alt0.c9f.2ALT-PU-2021-1961-1273497Fixed
kernel-image-std-defc74.4.277-alt0.M70C.14.4.277-alt0.M70C.1ALT-PU-2021-3033-1281293Fixed
kernel-image-std-defp115.10.42-alt16.1.91-alt1ALT-PU-2021-1917-1273495Fixed
kernel-image-std-kvmsisyphus5.10.42-alt15.10.176-alt1ALT-PU-2021-1920-1273546Fixed
kernel-image-std-kvmp105.10.42-alt15.10.42-alt1ALT-PU-2021-1920-1273546Fixed
kernel-image-std-kvmp115.10.42-alt15.10.176-alt1ALT-PU-2021-1920-1273546Fixed
kernel-image-un-defsisyphus4.5.0-alt16.6.32-alt1ALT-PU-2016-1262-1161431Fixed
kernel-image-un-defsisyphus_riscv645.19.16-alt2.rv646.6.31-alt1.0.portALT-PU-2022-6777-1-Fixed
kernel-image-un-defp104.5.0-alt16.1.90-alt1ALT-PU-2016-1262-1161431Fixed
kernel-image-un-defp95.7.0-alt15.10.216-alt2ALT-PU-2020-2164-1252789Fixed
kernel-image-un-defp84.13.7-alt0.M80P.14.19.310-alt0.M80P.1ALT-PU-2017-2470-1188636Fixed
kernel-image-un-defc10f14.5.0-alt16.1.85-alt0.c10f.1ALT-PU-2016-1262-1161431Fixed
kernel-image-un-defc9f25.7.0-alt15.10.29-alt2ALT-PU-2020-2164-1252789Fixed
kernel-image-un-defc74.9.277-alt0.M70C.14.9.277-alt0.M70C.1ALT-PU-2021-3032-1281292Fixed
kernel-image-un-defp114.5.0-alt16.6.31-alt1ALT-PU-2016-1262-1161431Fixed
kernel-image-xenomaip104.19.229-alt1.cip67.214.19.252-alt1.cip78.23ALT-PU-2022-2096-1301830Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.fragattacks.com
  • Exploit
  • Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
  • Third Party Advisory
[oss-security] 20210511 various 802.11 security issues - fragattacks.com
  • Mailing List
  • Third Party Advisory
[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update
  • Mailing List
  • Third Party Advisory
[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update
  • Mailing List
  • Third Party Advisory
20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021
  • Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
  • Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
  • Third Party Advisory
[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)

      1. Configuration 1

        cpe:2.3:a:ieee:ieee_802.11:*:*:*:*:*:*:*:*

        Configuration 2

        cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

        Configuration 3

        cpe:2.3:a:linux:mac80211:-:*:*:*:*:*:*:*

        Configuration 4

        cpe:2.3:o:arista:c-250_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:arista:c-250:-:*:*:*:*:*:*:*

        Configuration 5

        cpe:2.3:o:arista:c-260_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:arista:c-260:-:*:*:*:*:*:*:*

        Configuration 6

        cpe:2.3:o:arista:c-230_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:arista:c-230:-:*:*:*:*:*:*:*

        Configuration 7

        cpe:2.3:o:arista:c-235_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:arista:c-235:-:*:*:*:*:*:*:*

        Configuration 8

        cpe:2.3:o:arista:c-200_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:arista:c-200:-:*:*:*:*:*:*:*

        Configuration 9

        cpe:2.3:o:intel:ax210_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ax210:-:*:*:*:*:*:*:*

        Configuration 10

        cpe:2.3:o:intel:ax201_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ax201:-:*:*:*:*:*:*:*

        Configuration 11

        cpe:2.3:o:intel:ax200_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ax200:-:*:*:*:*:*:*:*

        Configuration 12

        cpe:2.3:o:intel:ac_9560_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_9560:-:*:*:*:*:*:*:*

        Configuration 13

        cpe:2.3:o:intel:ac_9462_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_9462:-:*:*:*:*:*:*:*

        Configuration 14

        cpe:2.3:o:intel:ac_9461_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_9461:-:*:*:*:*:*:*:*

        Configuration 15

        cpe:2.3:o:intel:ac_9260_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_9260:-:*:*:*:*:*:*:*

        Configuration 16

        cpe:2.3:o:intel:ac_8265_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_8265:-:*:*:*:*:*:*:*

        Configuration 17

        cpe:2.3:o:intel:ac_8260_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_8260:-:*:*:*:*:*:*:*

        Configuration 18

        cpe:2.3:o:intel:ac_3168_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_3168:-:*:*:*:*:*:*:*

        Configuration 19

        cpe:2.3:o:intel:ac_7265_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_7265:-:*:*:*:*:*:*:*

        Configuration 20

        cpe:2.3:o:intel:ac_3165_firmware:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_3165:-:*:*:*:*:*:*:*

        Configuration 21

        cpe:2.3:o:intel:ax1675_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ax1675:-:*:*:*:*:*:*:*

        Configuration 22

        cpe:2.3:o:intel:ax1650_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ax1650:-:*:*:*:*:*:*:*

        Configuration 23

        cpe:2.3:o:intel:ac_1550_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:intel:ac_1550:-:*:*:*:*:*:*:*

        Configuration 24

        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        4.4
        End excliding
        4.4.271
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        4.9
        End excliding
        4.9.271
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        4.14
        End excliding
        4.14.235
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        4.19
        End excliding
        4.19.193
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        5.4
        End excliding
        5.4.124
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        5.10
        End excliding
        5.10.42
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        5.12
        End excliding
        5.12.9
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.5.3
    Back to top