Wind River Support Network

HomeDefectsLIN1019-6533
Fixed

LIN1019-6533 : Security Advisory - linux - CVE-2020-24587

Created: May 12, 2021    Updated: Apr 22, 2022
Resolved Date: Jun 23, 2021
Found In Version: 10.19.45.1
Fix Version: 10.19.45.18
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

CREATE(Triage):(User=admin) CVE-2020-24587 (https://nvd.nist.gov/vuln/detail/CVE-2020-24587)

CVEs


Live chat
Online