https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:28:56 +0000 https://vulnerability.circl.lu/vuln/cve-2020-26147 <p><strong>Affected:</strong> Siemens SCALANCE W1748-1 M12, Siemens SCALANCE W1788-1 M12, Siemens SCALANCE W1788-2 EEC M12, Siemens SCALANCE W1788-2 M12, Siemens SCALANCE W1788-2IA M12, Siemens SCALANCE W721-1 RJ45, Siemens SCALANCE W722-1 RJ45, Siemens SCALANCE W734-1 RJ45, Siemens SCALANCE W734-1 RJ45 (USA), Siemens SCALANCE W738-1 M12 and 18 more</p> <p>An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.</p> <p><strong>Affected:</strong> Siemens SCALANCE W1748-1 M12, Siemens SCALANCE W1788-1 M12, Siemens SCALANCE W1788-2 EEC M12, Siemens SCALANCE W1788-2 M12, Siemens SCALANCE W1788-2IA M12, Siemens SCALANCE W721-1 RJ45, Siemens SCALANCE W722-1 RJ45, Siemens SCALANCE W734-1 RJ45, Siemens SCALANCE W734-1 RJ45 (USA), Siemens SCALANCE W738-1 M12 and 18 more</p> <p>An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.</p> https://vulnerability.circl.lu/vuln/cve-2020-26147 https://vulnerability.circl.lu/vuln/usn-4999-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: linux-aws-5.8, Ubuntu:20.04:LTS: linux-azure-5.8, Ubuntu:20.04:LTS: linux-gcp-5.8, Ubuntu:20.04:LTS: linux-hwe-5.8, Ubuntu:20.04:LTS: linux-oracle-5.8</p> <p>Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609)</p> <p>Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel did not properly enforce limits for pointer operations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33200)</p> <p>Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did not properly clear received fragments from memory in some situations. A physically proximate attacker could possibly use this issue to inject packets or expose sensitive information. (CVE-2020-24586)</p> <p>Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation incorrectly handled encrypted fragments. A physically proximate attacker could possibly use this issue to decrypt fragments. (CVE-2020-24587)</p> <p>Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation incorrectly handled certain malformed frames. If a user were tricked into connecting to a malicious server, a physically proximate attacker could use this issue to inject packets. (CVE-2020-24588)</p> <p>Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25670)</p> <p>Kiyin (尹亮) discovered that the NFC…</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: linux-aws-5.8, Ubuntu:20.04:LTS: linux-azure-5.8, Ubuntu:20.04:LTS: linux-gcp-5.8, Ubuntu:20.04:LTS: linux-hwe-5.8, Ubuntu:20.04:LTS: linux-oracle-5.8</p> <p>Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609)</p> <p>Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel did not properly enforce limits for pointer operations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33200)</p> <p>Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did not properly clear received fragments from memory in some situations. A physically proximate attacker could possibly use this issue to inject packets or expose sensitive information. (CVE-2020-24586)</p> <p>Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation incorrectly handled encrypted fragments. A physically proximate attacker could possibly use this issue to decrypt fragments. (CVE-2020-24587)</p> <p>Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation incorrectly handled certain malformed frames. If a user were tricked into connecting to a malicious server, a physically proximate attacker could use this issue to inject packets. (CVE-2020-24588)</p> <p>Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25670)</p> <p>Kiyin (尹亮) discovered that the NFC…</p> https://vulnerability.circl.lu/vuln/usn-4999-1