UVI-2021-1000145 openvswitch: fix stack OOB read while fragmenting IPv4 packets

openvswitch: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

GSD-2021-1000072 openvswitch: fix stack OOB read while fragmenting IPv4 packets

openvswitch: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000177 openvswitch: fix stack OOB read while fragmenting IPv4 packets

openvswitch: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

PT-2021-28612

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.10.36 Description The issue concerns a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.10.36. The...

PT-2021-28644

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.4.118 Linux Kernel versions v4.16 through v5.4.117 Description A potential security issue exists due to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have...

PT-2021-28539

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.12.3 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-28537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.12.3 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28578

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.11.20 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.11.20...

PT-2021-24543

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.11 through v5.12.3 Description: The issue concerns a stack out-of-bounds read while fragmenting IPv4 packets. This problem was introduced in version v5.11 and is fixed in version v5.12.3. Recommendations: For Linux...

PT-2021-24650

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.4.118 Linux Kernel versions v4.16 through v5.4.117 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel...

PT-2021-28576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.11.19 Description The issue concerns a stack out-of-bounds read while fragmenting IPv4 packets. This problem was introduced in version v5.11 and is fixed in version v5.11.20. The actual impact and attack...

PT-2021-24584

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.11.20 Linux Kernel versions v4.16 through v5.11.19 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel...

CVE-2020-24586

A flaw was found in the Linux kernels implementation of wifi fragmentation handling. An attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where previous contents of wifi fragments can be unintentionally transmitted to another device...

FragAttack: New Wi-Fi vulnerabilities that affect… basically everything

A new set of vulnerabilities with an aggressive name and their own website almost always bodes ill. The name FragAttack is a contraction of fragmentation and aggregation attacks, which immediately indicates the main area where the vulnerabilities were found. The vulnerabilities are mostly in how...

Security Advisory 0063

Security Advisory 0063 PDF Updated: May 25th, 2021 Revision | Date | Changes ---|---|--- 1.0 | May 12th, 2021 | Initial Release 1.1 | May 25th, 2021 | Updated assessment with impacted platforms, detection and mitigation. 1.2 | June 9, 2021 | Updated assessment 1.3 | August 19, 2021 | Updated...

HPESBNW04145 rev.4 - Aruba Instant Access Points, ArubaOS Access Points when Managed by Mobiltity Controllers, Aruba Instant On, Aruba UXI Sensors, 802.11 Frame Aggregation and Fragmentation Vulnerabilities

Potential Security Impact: Remote: Disclosure of Sensitive Information, Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 1XX Series Campus Access Points - Prior to 6.5.4.19, 6.5.4.20, 8.3.0.15, 8.3.0.16, 8.5.0.12, 8.5.0.13, 8.6.0.8, 8.6.0.9, 8.7.1....

CVE-2020-26146

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented...

DEBIAN-CVE-2020-24586

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received fragments be cleared from memory after reconnecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using...

DEBIAN-CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames...

UBUNTU-CVE-2020-24587

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...