Wind River Support Network

HomeDefectsLIN10-8612
Fixed

LIN10-8612 : Security Advisory - linux - CVE-2020-24587

Created: May 12, 2021    Updated: Apr 22, 2022
Resolved Date: Jun 25, 2021
Found In Version: 10.17.41.1
Fix Version: 10.17.41.25
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Kernel

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

CREATE(Triage):(User=admin) CVE-2020-24587 (https://nvd.nist.gov/vuln/detail/CVE-2020-24587)

CVEs


Live chat
Online