IEEE 802.11 (WLAN): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 14

• Critical 9.1
  CVE-2020-11264 EPSS 13%

  Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network pack…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Sep 8, 2021
• Critical 9.1
  CVE-2020-11301 EPSS 11%

  Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosu…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Sep 8, 2021
• Medium 5.3
  CVE-2020-26146

  An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-24586

  The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-24587

  The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-24588

  The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26139

  An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26140

  An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26141

  An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26142

  An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented fra…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26143

  An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26144

  An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26145

  An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021
• Unscored —
  CVE-2020-26147

  An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 11, 2021

Revision history

1. 2025-07-09 #31

   Referenz(en) aufgenommen: EUVD-2025-20903

2. 2023-07-11 #30

   Neue Updates von SUSE aufgenommen

3. 2023-04-02 #29

   Neue Updates von Debian aufgenommen

4. 2023-02-15 #28

   Neue Updates von SUSE aufgenommen

5. 2023-02-13 #27

   Neue Updates von SUSE aufgenommen

6. 2022-12-14 #26

   Neue Updates von HP aufgenommen

7. 2022-11-16 #25

   Neue Updates von Oracle Linux aufgenommen

8. 2022-03-22 #24

   Neue Updates von Ubuntu aufgenommen

9. 2022-03-15 #23

   Neue Updates von FreeBSD aufgenommen

10. 2022-02-21 #22

    Neue Updates von Ubuntu aufgenommen

11. 2022-01-30 #21

    Neue Updates von Amazon aufgenommen

12. 2021-11-09 #20

    Neue Updates von Red Hat aufgenommen

13. 2021-10-11 #19

    Neue Updates von ORACLE aufgenommen

14. 2021-10-10 #18

    Neue Updates von Oracle Linux aufgenommen

15. 2021-09-22 #17

    Neue Updates von Oracle Linux und ORACLE aufgenommen

16. 2021-09-20 #16

    Neue Updates von Oracle Linux aufgenommen

17. 2021-08-09 #15

    Neue Updates von Oracle Linux aufgenommen

18. 2021-07-22 #14

    Neue Updates von SUSE aufgenommen

19. 2021-07-21 #13

    Neue Updates von SUSE aufgenommen

20. 2021-07-20 #12

    Neue Updates von Ubuntu und SUSE aufgenommen

21. 2021-07-14 #11

    Neue Updates von SUSE aufgenommen

22. 2021-07-13 #10

    Neue Updates von SUSE aufgenommen

23. 2021-06-30 #9

    Neue Updates von SUSE aufgenommen

24. 2021-06-27 #8

    Neue Updates von HP und Ubuntu aufgenommen

25. 2021-06-22 #7

    Neue Updates von Debian und Ubuntu aufgenommen

References

• Wi-Fi Alliance security update vom 2021-05-11
  https://www.wi-fi.org/security-update-fragmentation
• FragAttacks Test Tool
  https://github.com/vanhoefm/fragattacks
• Aruba Product Security Advisory PSA-2021-011
  https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-011.txt
• FragAttack Website
  https://www.fragattacks.com/
• Arista Security Advisory
  https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-24587
• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-24588
• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-26144
• Cisco Security Advisory cisco-sa-wifi-faf-22epcEWu
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• Intel Security Advisory INTEL-SA-00473
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
• AVM Sicherheitshinweise vom 2021-05-11
  https://avm.de/service/aktuelle-sicherheitshinweise/
• Juniper Security Advisory JSA11170 vom 20201-05-11
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11170
• Linux Kernel Patches vom 2021-05-11
  https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/
• Lenovo Security Advisory LEN-57316 vom 2021-05-11
  https://support.lenovo.com/de/de/product_security/ps500405-intel-proset-and-wireless-wifi-intel-vpro-csme-wifi-and-intel-killer-wifi-advisory
• BSI-Cyber-Sicherheitswarnung vom 2021-05-11
  https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2021/2021-216748-1032.pdf?__blob=publicationFile&v=3
• Deutsche Telekom Pressemeldung zu FragAttack vom 2021-05-12
  https://www.telekom.com/de/konzern/details/fragattack-luecke-im-wlan-standard-626972
• SYNOLOGY Security Advisory SYNOLOGY-SA-21:20 vom 2021-05-12
  https://www.synology.com/en-global/support/security/Synology_SA_21_20
• Zyxel security advisory for FragAttacks against WiFi products vom 2021-05-13
  https://www.zyxel.com/support/Zyxel_security_advisory_for_FragAttacks_against_WiFi_products.shtml
• EMC Security Advisory DSA-2021-100 vom 2021-05-17
  https://www.dell.com/support/kbdoc/de-de/000186331/dsa-2021-100-dell-client-platform-security-update-for-intel-wifi-software-vulnerabilitiesdsa-2021-100-dell-client-platform-security-update-for-intel-wifi-software-vulnerabilities
• SUSE Security Update SUSE-SU-2021:1899-1 vom 2021-06-09
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008965.html
• SUSE Security Update SUSE-SU-2021:1888-1 vom 2021-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008950.html
• SUSE Security Update SUSE-SU-2021:1889-1 vom 2021-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008956.html
• SUSE Security Update SUSE-SU-2021:1887-1 vom 2021-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008955.html
• SUSE Security Update SUSE-SU-2021:1890-1 vom 2021-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008947.html
• SUSE Security Update SUSE-SU-2021:1891-1 vom 2021-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008946.html
• SUSE Security Update SUSE-SU-2021:1912-1 vom 2021-06-09
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html
• SUSE Security Update SUSE-SU-2021:1913-1 vom 2021-06-09
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/008973.html
• SUSE Security Update SUSE-SU-2021:1977-1 vom 2021-06-15
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html
• SUSE Security Update SUSE-SU-2021:1975-1 vom 2021-06-15
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html
• Debian Security Advisory DLA-2690 vom 2021-06-23
  https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
• Debian Security Advisory DLA-2689 vom 2021-06-23
  https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
• Ubuntu Security Notice USN-4997-1 vom 2021-06-23
  https://ubuntu.com/security/notices/USN-4997-1
• Ubuntu Security Notice USN-4999-1 vom 2021-06-23
  https://ubuntu.com/security/notices/USN-4999-1
• Ubuntu Security Notice USN-5001-1 vom 2021-06-23
  https://ubuntu.com/security/notices/USN-5001-1
• Ubuntu Security Notice USN-5000-1 vom 2021-06-23
  https://ubuntu.com/security/notices/USN-5000-1
• HPE Security Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbnw04145en_us
• Ubuntu Security Notice USN-5000-2 vom 2021-06-25
  https://ubuntu.com/security/notices/USN-5000-2
• Ubuntu Security Notice USN-4997-2 vom 2021-06-25
  https://ubuntu.com/security/notices/USN-4997-2
• SUSE Security Update SUSE-SU-2021:2208-1 vom 2021-06-30
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/009103.html
• SUSE Security Update SUSE-SU-2021:14764-1 vom 2021-07-13
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009128.html
• SUSE Security Update SUSE-SU-2021:2324-1 vom 2021-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009141.html
• SUSE Security Update SUSE-SU-2021:2349-1 vom 2021-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009133.html
• SUSE Security Update SUSE-SU-2021:2321-1 vom 2021-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009132.html
• Ubuntu Security Notice USN-5018-1 vom 2021-07-21
  https://ubuntu.com/security/notices/USN-5018-1
• SUSE Security Update SUSE-SU-2021:2406-1 vom 2021-07-20
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009166.html
• SUSE Security Update SUSE-SU-2021:2427-1 vom 2021-07-21
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html
• SUSE Security Update SUSE-SU-2021:2421-1 vom 2021-07-21
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009183.html
• SUSE Security Update SUSE-SU-2021:2422-1 vom 2021-07-21
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009191.html
• SUSE Security Update SUSE-SU-2021:2451-1 vom 2021-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2021-July/009203.html
• Oracle Linux Security Advisory ELSA-2021-9406 vom 2021-08-10
  http://linux.oracle.com/errata/ELSA-2021-9406.html
• Oracle Linux Security Advisory ELSA-2021-9404 vom 2021-08-10
  http://linux.oracle.com/errata/ELSA-2021-9404.html
• Oracle Linux Security Advisory ELSA-2021-9452 vom 2021-09-21
  https://linux.oracle.com/errata/ELSA-2021-9452.html
• Oracle Linux Security Advisory ELSA-2021-9453 vom 2021-09-21
  https://linux.oracle.com/errata/ELSA-2021-9453.html
• Oracle Linux Security Advisory ELSA-2021-9459 vom 2021-09-22
  http://linux.oracle.com/errata/ELSA-2021-9459.html
• ORACLE OVMSA-2021-0031 vom 2021-09-22
  https://oss.oracle.com/pipermail/oraclevm-errata/2021-September/001030.html
• Oracle Linux Security Advisory ELSA-2021-9473 vom 2021-10-08
  http://linux.oracle.com/errata/ELSA-2021-9473.html
• ORACLE OVMSA-2021-0035 vom 2021-10-12
  https://oss.oracle.com/pipermail/oraclevm-errata/2021-October/001033.html
• Red Hat Security Advisory RHSA-2021:4140 vom 2021-11-10
  https://access.redhat.com/errata/RHSA-2021:4140
• Red Hat Security Advisory RHSA-2021:4356 vom 2021-11-09
  https://access.redhat.com/errata/RHSA-2021:4356
• Amazon Linux Security Advisory ALASKERNEL-5.4-2022-004 vom 2022-01-31
  https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-004.html
• Amazon Linux Security Advisory ALASKERNEL-5.10-2022-002 vom 2022-01-31
  https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2022-002.html
• Ubuntu Security Notice USN-5299-1 vom 2022-02-22
  https://ubuntu.com/security/notices/USN-5299-1
• FreeBSD Security Advisory FREEBSD-SA-22:02.WIFI vom 2022-03-15
  https://security.FreeBSD.org/advisories/FreeBSD-SA-22:02.wifi.asc
• Ubuntu Security Notice USN-5343-1 vom 2022-03-22
  https://ubuntu.com/security/notices/USN-5343-1
• Oracle Linux Security Advisory ELSA-2022-9999 vom 2022-11-16
  http://linux.oracle.com/errata/ELSA-2022-9999.html
• HP Security Bulletin HPSBPI03763 vom 2022-12-15
  https://support.hp.com/de-de/document/ish_5610341-5610907-16/HPSBPI03763
• SUSE Security Update SUSE-SU-2023:0394-1 vom 2023-02-13
  https://lists.suse.com/pipermail/sle-security-updates/2023-February/013743.html
• SUSE Security Update SUSE-SU-2023:0433-1 vom 2023-02-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-February/013801.html
• Debian Security Advisory DLA-3380 vom 2023-04-01
  https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• SUSE Security Update SUSE-SU-2023:2809-1 vom 2023-07-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015470.html