logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2020-24586

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.


Affected Package


OS OS Version Package Name Package Version
Debian 12 firmware-nonfree 20210818-1
Debian 11 firmware-nonfree 20210315-3
Debian 10 firmware-nonfree 20190114-2
Debian 999 firmware-nonfree 20210818-1
Debian 9 firmware-nonfree 20161130-5
Debian 12 linux 5.18.5-1
Debian 11 linux 5.10.106-1
Debian 10 linux 4.19.235-1
Debian 999 linux 5.18.5-1
Debian 9 linux 4.9.228-1
Debian 9 linux-4.19 4.19.194-1~deb9u1

Related