Wind River Support Network

HomeDefectsLIN1021-12
Fixed

LIN1021-12 : Security Advisory - linux - CVE-2020-24587 (WiFi)

Created: May 17, 2021    Updated: May 13, 2022
Resolved Date: Jul 12, 2021
Found In Version: 10.21.20.1
Fix Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

CREATE(Triage):(User=admin) CVE-2020-24587 (https://nvd.nist.gov/vuln/detail/CVE-2020-24587)

CVEs


Live chat
Online