Wind River Support Network

HomeDefectsLIN1018-7659
Fixed

LIN1018-7659 : Security Advisory - linux - CVE-2020-24587

Created: May 12, 2021    Updated: Apr 22, 2022
Resolved Date: Jun 29, 2021
Found In Version: 10.18.44.1
Fix Version: 10.18.44.23
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Kernel

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

CREATE(Triage):(User=admin) CVE-2020-24587 (https://nvd.nist.gov/vuln/detail/CVE-2020-24587)

CVEs


Live chat
Online