5.4 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N
3.2 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:H/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
45.1%
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and
WPA3 implementations reassemble fragments even though some of them were
sent in plaintext. This vulnerability can be abused to inject packets
and/or exfiltrate selected fragments when another device sends fragmented
frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | <ย 4.15.0-151.157 | UNKNOWN |
ubuntu | 20.04 | noarch | linux | <ย 5.4.0-77.86 | UNKNOWN |
ubuntu | 20.10 | noarch | linux | <ย 5.8.0-59.66 | UNKNOWN |
ubuntu | 21.04 | noarch | linux | <ย 5.11.0-22.23 | UNKNOWN |
ubuntu | 16.04 | noarch | linux | <ย 4.4.0-219.252) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | <ย 4.15.0-1109.116 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | <ย 5.4.0-1051.53 | UNKNOWN |
ubuntu | 20.10 | noarch | linux-aws | <ย 5.8.0-1038.40 | UNKNOWN |
ubuntu | 21.04 | noarch | linux-aws | <ย 5.11.0-1011.11 | UNKNOWN |
ubuntu | 14.04 | noarch | linux-aws | <ย 4.4.0-1099.104) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
launchpad.net/bugs/cve/CVE-2020-26147
nvd.nist.gov/vuln/detail/CVE-2020-26147
papers.mathyvanhoef.com/usenix2021.pdf
security-tracker.debian.org/tracker/CVE-2020-26147
ubuntu.com/security/notices/USN-4997-1
ubuntu.com/security/notices/USN-4997-2
ubuntu.com/security/notices/USN-4999-1
ubuntu.com/security/notices/USN-5000-1
ubuntu.com/security/notices/USN-5000-2
ubuntu.com/security/notices/USN-5001-1
ubuntu.com/security/notices/USN-5018-1
ubuntu.com/security/notices/USN-5299-1
ubuntu.com/security/notices/USN-5343-1
www.cve.org/CVERecord?id=CVE-2020-26147
5.4 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N
3.2 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:H/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
45.1%