Vulnerability-Lookup

RHSA-2021:4356

Vulnerability from csaf_redhat - Published: 2021-11-09 18:06 - Updated: 2026-08-19 19:22

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: out-of-bounds reads in pinctrl subsystem (CVE-2020-0427) * kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502) * kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503) * kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504) * kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586) * kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587) * kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588) * kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139) * kernel: accepting plaintext data frames in protected networks (CVE-2020-26140) * kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141) * kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143) * kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144) * kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145) * kernel: powerpc: RTAS calls can be used to compromise kernel integrity (CVE-2020-27777) * kernel: locking inconsistency in tty_io.c and tty_jobctrl.c can lead to a read-after-free (CVE-2020-29660) * kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function via a long SSID value (CVE-2020-36158) * kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() (CVE-2020-36386) * kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129) * kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348) * kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489) * kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564) * kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573) * kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600) * kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679) * kernel: Mounting overlayfs inside an unprivileged user namespace can reveal files (CVE-2021-3732) * kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194) * kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133) * kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950) * kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971) * kernel: protection can be bypassed to leak content of kernel memory (CVE-2021-29155) * kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646) * kernel: lack a full memory barrier may lead to DoS (CVE-2021-29650) * kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440) * kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content of kernel memory (CVE-2021-31829) * kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier (CVE-2021-33200) * kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146) * kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147) * kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check (CVE-2020-29368) * kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635) * kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659) * kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239) * kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2019-14615

An information disclosure flaw was found in the Linux kernel. The i915 graphics driver lacks control of flow for data structures which may allow a local, authenticated user to disclose information when using ioctl commands with an attached i915 device. The highest threat from this vulnerability is to data confidentiality.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer

Affected products

Fixed 120 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.5.0.GA:bpftool-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-0:4.18.0-348.el8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-abi-stablelists-0:4.18.0-348.el8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-core-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-core-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-core-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-core-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-core-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-core-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-core-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-core-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-devel-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-devel-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-devel-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-devel-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-extra-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-extra-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-extra-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debug-modules-extra-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-common-s390x-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-devel-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-devel-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-devel-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-devel-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-doc-0:4.18.0-348.el8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-extra-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-extra-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-extra-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-modules-extra-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-libs-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-libs-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-tools-libs-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-zfcpdump-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-zfcpdump-core-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-zfcpdump-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-zfcpdump-devel-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-zfcpdump-modules-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:kernel-zfcpdump-modules-extra-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:bpftool-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debug-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-tools-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-tools-libs-devel-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-tools-libs-devel-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:kernel-tools-libs-devel-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:perf-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.5.0.GA:python3-perf-debuginfo-0:4.18.0-348.el8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2019-15794

A flaw was found in the Linux kernel. In Overlayfs, vma->vm_file was replaced in the mmap handlers and, on errors, the original value is not restored. A local attacker with special user privilege (or root) can cause a kernel internal information leak. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-672 - Operation on a Resource after Expiration or Release

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-0427

A flaw was found in the Linux pinctrl system. It is possible to trigger an of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-24502

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially enable a denial of service via local access.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-24503

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially enable information disclosure via local access.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-24504

An uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially cause a denial of service via local access.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-24586

A flaw was found in the Linux kernels implementation of wifi fragmentation handling. An attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where previous contents of wifi fragments can be unintentionally transmitted to another device.

4.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-24587

A flaw was found in the Linux kernel's WiFi implementation. An attacker within the wireless range can abuse a logic flaw in the WiFi implementation by reassembling packets from multiple fragments under different keys, treating them as valid. This flaw allows an attacker to send a fragment under an incorrect key, treating them as a valid fragment under the new key. The highest threat from this vulnerability is to confidentiality.

3.1 (Low)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-24588

A flaw was found in the Linux kernels wifi implementation. An attacker within wireless broadcast range can inject custom data into the wireless communication circumventing checks on the data. This can cause the frame to pass checks and be considered a valid frame of a different type.

4.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-20 - Improper Input Validation

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26139

Frames used for authentication and key management between the AP and connected clients. Some clients may take these redirected frames masquerading as control mechanisms from the AP.

3.5 (Low)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26140

A vulnerability was found in Linux kernel. Where the WiFi implementations accept plaintext frames in a protected WiFi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26141

A vulnerability was found in Linux kernel's WiFi implementation. An attacker within wireless range can inject a control packet fragment where the kernel does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-354 - Improper Validation of Integrity Check Value

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26143

A vulnerability was found in Linux kernel, where the WiFi implementations assemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26144

A flaw was found in the Linux kernel, where the WiFi implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (ex., LLC/SNAP) header for EAPOL. The highest threat from this vulnerability is to integrity.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-290 - Authentication Bypass by Spoofing

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26145

A flaw was found in ath10k_htt_rx_proc_rx_frag_ind_hl in drivers/net/wireless/ath/ath10k/htt_rx.c in the Linux kernel WiFi implementations, where it accepts a second (or subsequent) broadcast fragments even when sent in plaintext and then process them as full unfragmented frames. The highest threat from this vulnerability is to integrity.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-26146

A vulnerability was found in Linux kernel, where the WiFi implementation reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.

5.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2020-26147

A flaw was found in ieee80211_rx_h_defragment in net/mac80211/rx.c in the Linux Kernel's WiFi implementation. This vulnerability can be abused to inject packets or exfiltrate selected fragments when another device sends fragmented frames, and the WEP, CCMP, or GCMP data-confidentiality protocol is used. The highest threat from this vulnerability is to integrity.

5.4 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-862 - Missing Authorization

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-29368

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-29660

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel. A local user could use this flaw to read numerical value from memory after free.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-413 - Improper Resource Locking

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-36158

A flaw was found in the Linux kernel. The marvell wifi driver could allow a local attacker to execute arbitrary code via a long SSID value in mwifiex_cmd_802_11_ad_hoc_start function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2020-36312

A flaw was found in the KVM hypervisor of the Linux kernel. A memory leak could occur in kvm_io_bus_unregister_dev() upon a kmalloc failure. The highest threat from this vulnerability is to system availability.

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2020-36386

A flaw out of bounds memory access in the Linux kernel bluetooth subsystem was found in the way when some data being read about the bluetooth device with the hci_extended_inquiry_result_evt call. A local user could use this flaw to crash the system or read some data out of memory bounds that can lead to data confidentiality threat.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-0129

A flaw was found in the Linux kernel. Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. The highest threat from this vulnerability is to data confidentiality and integrity.

6.4 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-287 - Improper Authentication

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3348

A use after free flaw in the Linux kernel network block device (NBD) subsystem was found in the way user calls an ioctl NBD_SET_SOCK at a certain point during device setup.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3444

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script uses mod32 destination register truncation when the source register was known to be 0. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3489

A flaw out of bound memory write in the Linux kernel BPF subsystem was found in the way user writes to BPF ring buffer too fast, so larger buffer than available memory could be allocated. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3564

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system.

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-415 - Double Free

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3573

A flaw use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-788 - Access of Memory Location After End of Buffer

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3600

A flaw was found in the Linux kernel’s eBPF verification code, where the eBPF 32-bit div/mod source register truncation could lead to out-of-bounds reads and writes. By default, accessing the eBPF verifier is only possible to privileged users with CAP_SYS_ADMIN. This flaw allows a local user who can run eBPF instructions to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3635

A flaw was found in the Linux kernel netfilter implementation. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2021-3659

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-252 - Unchecked Return Value

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2021-3679

A lack of CPU resources in the Linux kernel tracing module functionality was found in the way users use the trace ring buffer in specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-3732

A flaw was found in the Linux kernel’s OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-4442

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCP_QUEUE_SEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ _after_ restoring data in the receive queue. mprotect(0x4aa000, 12288, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0 connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0 setsockopt(3, SOL_TCP, TCP_REPAIR_QUEUE, [1], 4) = 0 sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="0x0000000000000003\0\0", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 20 setsockopt(3, SOL_TCP, TCP_REPAIR, [0], 4) = 0 setsockopt(3, SOL_TCP, TCP_QUEUE_SEQ, [128], 4) = 0 recvfrom(3, NULL, 20, 0, NULL, NULL) = -1 ECONNRESET (Connection reset by peer) syslog shows: [ 111.205099] TCP recvmsg seq # bug 2: copied 80, seq 0, rcvnxt 80, fl 0 [ 111.207894] WARNING: CPU: 1 PID: 356 at net/ipv4/tcp.c:2343 tcp_recvmsg_locked+0x90e/0x29a0 This should not be allowed. TCP_QUEUE_SEQ should only be used when queues are empty. This patch fixes this case, and the tx path as well.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-20194

A flaw buffer overflow in the Linux kernel BPF subsystem was found in the way user running BPF script calling getsockopt. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-20239

A flaw was found in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.

3.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-822 - Untrusted Pointer Dereference

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2021-23133

A use-after-free flaw was found in the Linux kernel's SCTP socket functionality that triggers a race condition. This flaw allows a local user to escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-28950

A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-28971

A flaw was found in the Linux kernel. On some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-29155

A vulnerability was discovered in retrieve_ptr_limit in kernel/bpf/verifier.c in the Linux kernel mechanism to mitigate speculatively out-of-bounds loads (Spectre mitigation). In this flaw a local, special user privileged (CAP_SYS_ADMIN) BPF program running on affected systems may bypass the protection, and execute speculatively out-of-bounds loads from the kernel memory. This can be abused to extract contents of kernel memory via side-channel.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-205 - Observable Behavioral Discrepancy

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-29646

A flaw buffer overflow in the Linux kernel TIPC protocol functionality was found in the way user uses protocol with encryption enabled. A local user could use this flaw to crash the system.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-29650

A denial-of-service (DoS) flaw was identified in the Linux kernel due to an incorrect memory barrier in xt_replace_table in net/netfilter/x_tables.c in the netfilter subsystem.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-29657

A flaw was found in the Linux kernel. A KVM guest on AMD can launch a nested guest without the Intercept VMRUN control bit by exploiting a TOCTOU vulnerability in nested_svm_vmrun. A malicious guest could use this flaw to gain unrestricted access to host MSRs, possibly leading to guest-to-host escape scenario.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-31440

An out-of-bounds access flaw was found in the Linux kernel’s implementation of the eBPF code verifier, where an incorrect register bounds calculation while checking unsigned 32-bit instructions in an eBPF program occurs.. By default accessing the eBPF verifier is only accessible to privileged users with CAP_SYS_ADMIN. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-682 - Incorrect Calculation

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-31829

A flaw was found in the Linux kernel's eBPF verification code. By default, accessing the eBPF verifier is only accessible to privileged users with CAP_SYS_ADMIN. This flaw allows a local user who can insert eBPF instructions, to use the eBPF verifier to abuse a spectre-like flaw and infer all system memory. The highest threat from this vulnerability is to confidentiality.

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-31916

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash, a leak of internal kernel information, or a privilege escalation problem.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2021-33033

A flaw use-after-free in the Linux kernel CIPSO network packet labeling protocol functionality was found in the way user open local network connection with the usage of the security labeling that is IP option number 134. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-33098

A flaw was found in the Linux kernel. This flaw allows an attacker who can modify the MTU of a virtualized PCIe device (in a guest, for example) to crash the host system’s kernel if they set the MTU of the VF device to an unsupported value.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-33200

A flaw was found in kernel/bpf/verifier.c in BPF in the Linux kernel. An incorrect limit is enforced for pointer arithmetic operations which can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-46905

A vulnerability was found in the Linux kernel. This flaw occurs due to an unconditional NULL-pointer dereference on every disconnect in the Linux kernel.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2021-46983

A flaw was found in an error-handling function in the Linux kernel's NVMe driver. This flaw allows an attacker with control over NVMe links to cause a denial of service.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-47011

In the Linux kernel, the following vulnerability has been resolved: mm: memcontrol: slab: fix obtain a reference to a freeing memcg Patch series "Use obj_cgroup APIs to charge kmem pages", v5. Since Roman's series "The new cgroup slab memory controller" applied. All slab objects are charged with the new APIs of obj_cgroup. The new APIs introduce a struct obj_cgroup to charge slab objects. It prevents long-living objects from pinning the original memory cgroup in the memory. But there are still some corner objects (e.g. allocations larger than order-1 page on SLUB) which are not charged with the new APIs. Those objects (include the pages which are allocated from buddy allocator directly) are charged as kmem pages which still hold a reference to the memory cgroup. E.g. We know that the kernel stack is charged as kmem pages because the size of the kernel stack can be greater than 2 pages (e.g. 16KB on x86_64 or arm64). If we create a thread (suppose the thread stack is charged to memory cgroup A) and then move it from memory cgroup A to memory cgroup B. Because the kernel stack of the thread hold a reference to the memory cgroup A. The thread can pin the memory cgroup A in the memory even if we remove the cgroup A. If we want to see this scenario by using the following script. We can see that the system has added 500 dying cgroups (This is not a real world issue, just a script to show that the large kmallocs are charged as kmem pages which can pin the memory cgroup in the memory). #!/bin/bash cat /proc/cgroups | grep memory cd /sys/fs/cgroup/memory echo 1 > memory.move_charge_at_immigrate for i in range{1..500} do mkdir kmem_test echo $$ > kmem_test/cgroup.procs sleep 3600 & echo $$ > cgroup.procs echo `cat kmem_test/cgroup.procs` > cgroup.procs rmdir kmem_test done cat /proc/cgroups | grep memory This patchset aims to make those kmem pages to drop the reference to memory cgroup by using the APIs of obj_cgroup. Finally, we can see that the number of the dying cgroups will not increase if we run the above test script. This patch (of 7): The rcu_read_lock/unlock only can guarantee that the memcg will not be freed, but it cannot guarantee the success of css_get (which is in the refill_stock when cached memcg changed) to memcg. rcu_read_lock() memcg = obj_cgroup_memcg(old) __memcg_kmem_uncharge(memcg) refill_stock(memcg) if (stock->cached != memcg) // css_get can change the ref counter from 0 back to 1. css_get(&memcg->css) rcu_read_unlock() This fix is very like the commit: eefbfa7fd678 ("mm: memcg/slab: fix use after free in obj_cgroup_charge") Fix this by holding a reference to the memcg which is passed to the __memcg_kmem_uncharge() before calling __memcg_kmem_uncharge().

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2021-47080

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prevent divide-by-zero error triggered by the user The user_entry_size is supplied by the user and later used as a denominator to calculate number of entries. The zero supplied by the user will trigger the following divide-by-zero error: divide error: 0000 [#1] SMP KASAN PTI CPU: 4 PID: 497 Comm: c_repro Not tainted 5.13.0-rc1+ #281 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:ib_uverbs_handler_UVERBS_METHOD_QUERY_GID_TABLE+0x1b1/0x510 Code: 87 59 03 00 00 e8 9f ab 1e ff 48 8d bd a8 00 00 00 e8 d3 70 41 ff 44 0f b7 b5 a8 00 00 00 e8 86 ab 1e ff 31 d2 4c 89 f0 31 ff <49> f7 f5 48 89 d6 48 89 54 24 10 48 89 04 24 e8 1b ad 1e ff 48 8b RSP: 0018:ffff88810416f828 EFLAGS: 00010246 RAX: 0000000000000008 RBX: 1ffff1102082df09 RCX: ffffffff82183f3d RDX: 0000000000000000 RSI: ffff888105f2da00 RDI: 0000000000000000 RBP: ffff88810416fa98 R08: 0000000000000001 R09: ffffed102082df5f R10: ffff88810416faf7 R11: ffffed102082df5e R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000008 R15: ffff88810416faf0 FS: 00007f5715efa740(0000) GS:ffff88811a700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000840 CR3: 000000010c2e0001 CR4: 0000000000370ea0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? ib_uverbs_handler_UVERBS_METHOD_INFO_HANDLES+0x4b0/0x4b0 ib_uverbs_cmd_verbs+0x1546/0x1940 ib_uverbs_ioctl+0x186/0x240 __x64_sys_ioctl+0x38a/0x1220 do_syscall_64+0x3f/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-369 - Divide By Zero

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2021-47226

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer Both Intel and AMD consider it to be architecturally valid for XRSTOR to fail with #PF but nonetheless change the register state. The actual conditions under which this might occur are unclear [1], but it seems plausible that this might be triggered if one sibling thread unmaps a page and invalidates the shared TLB while another sibling thread is executing XRSTOR on the page in question. __fpu__restore_sig() can execute XRSTOR while the hardware registers are preserved on behalf of a different victim task (using the fpu_fpregs_owner_ctx mechanism), and, in theory, XRSTOR could fail but modify the registers. If this happens, then there is a window in which __fpu__restore_sig() could schedule out and the victim task could schedule back in without reloading its own FPU registers. This would result in part of the FPU state that __fpu__restore_sig() was attempting to load leaking into the victim task's user-visible state. Invalidate preserved FPU registers on XRSTOR failure to prevent this situation from corrupting any state. [1] Frequent readers of the errata lists might imagine "complex microarchitectural conditions".

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-402 - Transmission of Private Resources into a New Sphere ('Resource Leak')

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2022-20166

A flaw was found in the Linux kernel’s sysfs layer. This flaw allows a local user who can read files under the /sysfs mount point to corrupt memory or possibly crash the system.

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2022-50042

A flaw was found in the netlink driver in the Linux kernel. A memory leak can occur when allocated memory is not released in certain error cases, potentially impacting system performance and resulting in a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2022-50073

A flaw was found in the tap module in the Linux kernel. A NULL pointer dereference can be triggered due to a missing initialization, resulting in a denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2023-53578

An uninitialized memory access flaw was found in the Linux kernel's QRTR (Qualcomm IPC Router) protocol in the transmit resume handling. When processing RESUME_TX messages, if the packet size is smaller than the expected control structure, the qrtr_tx_resume function reads uninitialized memory from the skb buffer. This can lead to unpredictable behavior, kernel warnings from KMSAN (Kernel Memory Sanitizer), and potential crashes, causing denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

CVE-2023-53598

A missing bounds check flaw was found in the Linux kernel's Modem Host Interface bus driver in the channel doorbell offset validation logic. A local user can trigger this issue on systems with MHI devices (typically Qualcomm modems or wireless cards) by using a device that provides malformed or malicious channel configuration data during initialization, causing an out-of-bounds array access. This leads to kernel memory corruption resulting in a panic or denial of service.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Moderate

CVE-2023-53607

An assertion failure was found in the Linux kernel's Yamaha YMF sound card driver during buffer validation. The probe function includes a BUG_ON assertion that compares DMA buffer sizes without accounting for alignment, causing the assertion to fail when the aligned buffer size doesn't exactly match the requested size. This triggers a kernel warning and can lead to driver initialization failure and denial of service.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 120 products, the same list as for CVE-2019-14615

Threats

Impact Low

References

365 references

URL	Category
https://access.redhat.com/errata/RHSA-2021:4356	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1509204	external
https://bugzilla.redhat.com/show_bug.cgi?id=1793880	external
https://bugzilla.redhat.com/show_bug.cgi?id=1816493	external
https://bugzilla.redhat.com/show_bug.cgi?id=1894101	external
https://bugzilla.redhat.com/show_bug.cgi?id=1900844	external
https://bugzilla.redhat.com/show_bug.cgi?id=1903244	external
https://bugzilla.redhat.com/show_bug.cgi?id=1906522	external
https://bugzilla.redhat.com/show_bug.cgi?id=1912683	external
https://bugzilla.redhat.com/show_bug.cgi?id=1913348	external
https://bugzilla.redhat.com/show_bug.cgi?id=1915825	external
https://bugzilla.redhat.com/show_bug.cgi?id=1919893	external
https://bugzilla.redhat.com/show_bug.cgi?id=1921958	external
https://bugzilla.redhat.com/show_bug.cgi?id=1923636	external
https://bugzilla.redhat.com/show_bug.cgi?id=1930376	external
https://bugzilla.redhat.com/show_bug.cgi?id=1930379	external
https://bugzilla.redhat.com/show_bug.cgi?id=1930381	external
https://bugzilla.redhat.com/show_bug.cgi?id=1933527	external
https://bugzilla.redhat.com/show_bug.cgi?id=1939341	external
https://bugzilla.redhat.com/show_bug.cgi?id=1941762	external
https://bugzilla.redhat.com/show_bug.cgi?id=1941784	external
https://bugzilla.redhat.com/show_bug.cgi?id=1945345	external
https://bugzilla.redhat.com/show_bug.cgi?id=1945388	external
https://bugzilla.redhat.com/show_bug.cgi?id=1946965	external
https://bugzilla.redhat.com/show_bug.cgi?id=1948772	external
https://bugzilla.redhat.com/show_bug.cgi?id=1951595	external
https://bugzilla.redhat.com/show_bug.cgi?id=1953847	external
https://bugzilla.redhat.com/show_bug.cgi?id=1954588	external
https://bugzilla.redhat.com/show_bug.cgi?id=1957788	external
https://bugzilla.redhat.com/show_bug.cgi?id=1959559	external
https://bugzilla.redhat.com/show_bug.cgi?id=1959642	external
https://bugzilla.redhat.com/show_bug.cgi?id=1959654	external
https://bugzilla.redhat.com/show_bug.cgi?id=1959657	external
https://bugzilla.redhat.com/show_bug.cgi?id=1959663	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960490	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960492	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960496	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960498	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960500	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960502	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960504	external
https://bugzilla.redhat.com/show_bug.cgi?id=1960708	external
https://bugzilla.redhat.com/show_bug.cgi?id=1964028	external
https://bugzilla.redhat.com/show_bug.cgi?id=1964139	external
https://bugzilla.redhat.com/show_bug.cgi?id=1965038	external
https://bugzilla.redhat.com/show_bug.cgi?id=1965360	external
https://bugzilla.redhat.com/show_bug.cgi?id=1965458	external
https://bugzilla.redhat.com/show_bug.cgi?id=1966578	external
https://bugzilla.redhat.com/show_bug.cgi?id=1969489	external
https://bugzilla.redhat.com/show_bug.cgi?id=1971101	external
https://bugzilla.redhat.com/show_bug.cgi?id=1972278	external
https://bugzilla.redhat.com/show_bug.cgi?id=1974627	external
https://bugzilla.redhat.com/show_bug.cgi?id=1975182	external
https://bugzilla.redhat.com/show_bug.cgi?id=1975949	external
https://bugzilla.redhat.com/show_bug.cgi?id=1976679	external
https://bugzilla.redhat.com/show_bug.cgi?id=1976699	external
https://bugzilla.redhat.com/show_bug.cgi?id=1976946	external
https://bugzilla.redhat.com/show_bug.cgi?id=1976969	external
https://bugzilla.redhat.com/show_bug.cgi?id=1977162	external
https://bugzilla.redhat.com/show_bug.cgi?id=1977422	external
https://bugzilla.redhat.com/show_bug.cgi?id=1977537	external
https://bugzilla.redhat.com/show_bug.cgi?id=1977850	external
https://bugzilla.redhat.com/show_bug.cgi?id=1978369	external
https://bugzilla.redhat.com/show_bug.cgi?id=1979070	external
https://bugzilla.redhat.com/show_bug.cgi?id=1979680	external
https://bugzilla.redhat.com/show_bug.cgi?id=1981954	external
https://bugzilla.redhat.com/show_bug.cgi?id=1986138	external
https://bugzilla.redhat.com/show_bug.cgi?id=1989165	external
https://bugzilla.redhat.com/show_bug.cgi?id=1989999	external
https://bugzilla.redhat.com/show_bug.cgi?id=1991976	external
https://bugzilla.redhat.com/show_bug.cgi?id=1992700	external
https://bugzilla.redhat.com/show_bug.cgi?id=1995249	external
https://bugzilla.redhat.com/show_bug.cgi?id=1996854	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2019-14615	self
https://bugzilla.redhat.com/show_bug.cgi?id=1789209	external
https://www.cve.org/CVERecord?id=CVE-2019-14615	external
https://nvd.nist.gov/vuln/detail/CVE-2019-14615	external
https://access.redhat.com/security/cve/CVE-2019-15794	self
https://bugzilla.redhat.com/show_bug.cgi?id=1831055	external
https://www.cve.org/CVERecord?id=CVE-2019-15794	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15794	external
https://access.redhat.com/security/cve/CVE-2020-0427	self
https://bugzilla.redhat.com/show_bug.cgi?id=1919893	external
https://www.cve.org/CVERecord?id=CVE-2020-0427	external
https://nvd.nist.gov/vuln/detail/CVE-2020-0427	external
https://access.redhat.com/security/cve/CVE-2020-24502	self
https://bugzilla.redhat.com/show_bug.cgi?id=1930379	external
https://www.cve.org/CVERecord?id=CVE-2020-24502	external
https://nvd.nist.gov/vuln/detail/CVE-2020-24502	external
https://access.redhat.com/security/cve/CVE-2020-24503	self
https://bugzilla.redhat.com/show_bug.cgi?id=1930381	external
https://www.cve.org/CVERecord?id=CVE-2020-24503	external
https://nvd.nist.gov/vuln/detail/CVE-2020-24503	external
https://access.redhat.com/security/cve/CVE-2020-24504	self
https://bugzilla.redhat.com/show_bug.cgi?id=1930376	external
https://www.cve.org/CVERecord?id=CVE-2020-24504	external
https://nvd.nist.gov/vuln/detail/CVE-2020-24504	external
https://www.intel.com/content/www/us/en/security-…	external
https://access.redhat.com/security/cve/CVE-2020-24586	self
https://bugzilla.redhat.com/show_bug.cgi?id=1959642	external
https://www.cve.org/CVERecord?id=CVE-2020-24586	external
https://nvd.nist.gov/vuln/detail/CVE-2020-24586	external
https://lore.kernel.org/linux-wireless/2021051120…	external
https://access.redhat.com/security/cve/CVE-2020-24587	self
https://bugzilla.redhat.com/show_bug.cgi?id=1959654	external
https://www.cve.org/CVERecord?id=CVE-2020-24587	external
https://nvd.nist.gov/vuln/detail/CVE-2020-24587	external
https://access.redhat.com/security/cve/CVE-2020-24588	self
https://bugzilla.redhat.com/show_bug.cgi?id=1959657	external
https://www.cve.org/CVERecord?id=CVE-2020-24588	external
https://nvd.nist.gov/vuln/detail/CVE-2020-24588	external
https://lore.kernel.org/linux-wireless/2021051120…	external
https://access.redhat.com/security/cve/CVE-2020-26139	self
https://bugzilla.redhat.com/show_bug.cgi?id=1959663	external
https://www.cve.org/CVERecord?id=CVE-2020-26139	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26139	external
https://lore.kernel.org/linux-wireless/2021051120…	external
https://access.redhat.com/security/cve/CVE-2020-26140	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960490	external
https://www.cve.org/CVERecord?id=CVE-2020-26140	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26140	external
https://access.redhat.com/security/cve/CVE-2020-26141	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960492	external
https://www.cve.org/CVERecord?id=CVE-2020-26141	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26141	external
https://lore.kernel.org/linux-wireless/2021051120…	external
https://access.redhat.com/security/cve/CVE-2020-26143	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960496	external
https://www.cve.org/CVERecord?id=CVE-2020-26143	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26143	external
https://access.redhat.com/security/cve/CVE-2020-26144	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960498	external
https://www.cve.org/CVERecord?id=CVE-2020-26144	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26144	external
https://access.redhat.com/security/cve/CVE-2020-26145	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960500	external
https://www.cve.org/CVERecord?id=CVE-2020-26145	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26145	external
https://lore.kernel.org/linux-wireless/2021051120…	external
https://access.redhat.com/security/cve/CVE-2020-26146	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960502	external
https://www.cve.org/CVERecord?id=CVE-2020-26146	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26146	external
https://access.redhat.com/security/cve/CVE-2020-26147	self
https://bugzilla.redhat.com/show_bug.cgi?id=1960504	external
https://www.cve.org/CVERecord?id=CVE-2020-26147	external
https://nvd.nist.gov/vuln/detail/CVE-2020-26147	external
https://lore.kernel.org/linux-wireless/2021051120…	external
https://access.redhat.com/security/cve/CVE-2020-27777	self
https://bugzilla.redhat.com/show_bug.cgi?id=1900844	external
https://www.cve.org/CVERecord?id=CVE-2020-27777	external
https://nvd.nist.gov/vuln/detail/CVE-2020-27777	external
https://git.kernel.org/pub/scm/linux/kernel/git/p…	external
https://www.openwall.com/lists/oss-security/2020/…	external
https://www.openwall.com/lists/oss-security/2020/…	external
https://access.redhat.com/security/cve/CVE-2020-29368	self
https://bugzilla.redhat.com/show_bug.cgi?id=1903244	external
https://www.cve.org/CVERecord?id=CVE-2020-29368	external
https://nvd.nist.gov/vuln/detail/CVE-2020-29368	external
https://access.redhat.com/security/cve/CVE-2020-29660	self
https://bugzilla.redhat.com/show_bug.cgi?id=1906522	external
https://www.cve.org/CVERecord?id=CVE-2020-29660	external
https://nvd.nist.gov/vuln/detail/CVE-2020-29660	external
https://access.redhat.com/security/cve/CVE-2020-36158	self
https://bugzilla.redhat.com/show_bug.cgi?id=1913348	external
https://www.cve.org/CVERecord?id=CVE-2020-36158	external
https://nvd.nist.gov/vuln/detail/CVE-2020-36158	external
https://access.redhat.com/security/cve/CVE-2020-36312	self
https://bugzilla.redhat.com/show_bug.cgi?id=1947991	external
https://www.cve.org/CVERecord?id=CVE-2020-36312	external
https://nvd.nist.gov/vuln/detail/CVE-2020-36312	external
https://access.redhat.com/security/cve/CVE-2020-36386	self
https://bugzilla.redhat.com/show_bug.cgi?id=1969489	external
https://www.cve.org/CVERecord?id=CVE-2020-36386	external
https://nvd.nist.gov/vuln/detail/CVE-2020-36386	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2021-0129	self
https://bugzilla.redhat.com/show_bug.cgi?id=1965038	external
https://www.cve.org/CVERecord?id=CVE-2021-0129	external
https://nvd.nist.gov/vuln/detail/CVE-2021-0129	external
https://access.redhat.com/security/cve/CVE-2021-3348	self
https://bugzilla.redhat.com/show_bug.cgi?id=1921958	external
https://www.cve.org/CVERecord?id=CVE-2021-3348	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3348	external
https://lore.kernel.org/linux-block/24dff677353e2…	external
https://access.redhat.com/security/cve/CVE-2021-3444	self
https://bugzilla.redhat.com/show_bug.cgi?id=1942667	external
https://www.cve.org/CVERecord?id=CVE-2021-3444	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3444	external
https://access.redhat.com/security/cve/CVE-2021-3489	self
https://bugzilla.redhat.com/show_bug.cgi?id=1959559	external
https://www.cve.org/CVERecord?id=CVE-2021-3489	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3489	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://www.openwall.com/lists/oss-security/2021/…	external
https://access.redhat.com/security/cve/CVE-2021-3564	self
https://bugzilla.redhat.com/show_bug.cgi?id=1964139	external
https://www.cve.org/CVERecord?id=CVE-2021-3564	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3564	external
https://www.openwall.com/lists/oss-security/2021/…	external
https://access.redhat.com/security/cve/CVE-2021-3573	self
https://bugzilla.redhat.com/show_bug.cgi?id=1966578	external
https://www.cve.org/CVERecord?id=CVE-2021-3573	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3573	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://www.openwall.com/lists/oss-security/2021/…	external
https://access.redhat.com/security/cve/CVE-2021-3600	self
https://bugzilla.redhat.com/show_bug.cgi?id=1981954	external
https://www.cve.org/CVERecord?id=CVE-2021-3600	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3600	external
https://lore.kernel.org/patchwork/patch/1379497/	external
https://www.openwall.com/lists/oss-security/2021/…	external
https://access.redhat.com/security/cve/CVE-2021-3635	self
https://bugzilla.redhat.com/show_bug.cgi?id=1976946	external
https://www.cve.org/CVERecord?id=CVE-2021-3635	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3635	external
https://access.redhat.com/security/cve/CVE-2021-3659	self
https://bugzilla.redhat.com/show_bug.cgi?id=1975949	external
https://www.cve.org/CVERecord?id=CVE-2021-3659	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3659	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2021-3679	self
https://bugzilla.redhat.com/show_bug.cgi?id=1989165	external
https://www.cve.org/CVERecord?id=CVE-2021-3679	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3679	external
https://lore.kernel.org/lkml/20210723125527.767d1…	external
https://access.redhat.com/security/cve/CVE-2021-3732	self
https://bugzilla.redhat.com/show_bug.cgi?id=1995249	external
https://www.cve.org/CVERecord?id=CVE-2021-3732	external
https://nvd.nist.gov/vuln/detail/CVE-2021-3732	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2021-4442	self
https://bugzilla.redhat.com/show_bug.cgi?id=2308455	external
https://www.cve.org/CVERecord?id=CVE-2021-4442	external
https://nvd.nist.gov/vuln/detail/CVE-2021-4442	external
https://lore.kernel.org/linux-cve-announce/202408…	external
https://access.redhat.com/security/cve/CVE-2021-20194	self
https://bugzilla.redhat.com/show_bug.cgi?id=1912683	external
https://www.cve.org/CVERecord?id=CVE-2021-20194	external
https://nvd.nist.gov/vuln/detail/CVE-2021-20194	external
https://access.redhat.com/security/cve/CVE-2021-20239	self
https://bugzilla.redhat.com/show_bug.cgi?id=1923636	external
https://www.cve.org/CVERecord?id=CVE-2021-20239	external
https://nvd.nist.gov/vuln/detail/CVE-2021-20239	external
https://access.redhat.com/security/cve/CVE-2021-23133	self
https://bugzilla.redhat.com/show_bug.cgi?id=1948772	external
https://www.cve.org/CVERecord?id=CVE-2021-23133	external
https://nvd.nist.gov/vuln/detail/CVE-2021-23133	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2021-28950	self
https://bugzilla.redhat.com/show_bug.cgi?id=1941762	external
https://www.cve.org/CVERecord?id=CVE-2021-28950	external
https://nvd.nist.gov/vuln/detail/CVE-2021-28950	external
https://access.redhat.com/security/cve/CVE-2021-28971	self
https://bugzilla.redhat.com/show_bug.cgi?id=1941784	external
https://www.cve.org/CVERecord?id=CVE-2021-28971	external
https://nvd.nist.gov/vuln/detail/CVE-2021-28971	external
https://access.redhat.com/security/cve/CVE-2021-29155	self
https://bugzilla.redhat.com/show_bug.cgi?id=1951595	external
https://www.cve.org/CVERecord?id=CVE-2021-29155	external
https://nvd.nist.gov/vuln/detail/CVE-2021-29155	external
https://www.openwall.com/lists/oss-security/2021/…	external
https://access.redhat.com/security/cve/CVE-2021-29646	self
https://bugzilla.redhat.com/show_bug.cgi?id=1945345	external
https://www.cve.org/CVERecord?id=CVE-2021-29646	external
https://nvd.nist.gov/vuln/detail/CVE-2021-29646	external
https://access.redhat.com/security/cve/CVE-2021-29650	self
https://bugzilla.redhat.com/show_bug.cgi?id=1945388	external
https://www.cve.org/CVERecord?id=CVE-2021-29650	external
https://nvd.nist.gov/vuln/detail/CVE-2021-29650	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2021-29657	self
https://bugzilla.redhat.com/show_bug.cgi?id=1995153	external
https://www.cve.org/CVERecord?id=CVE-2021-29657	external
https://nvd.nist.gov/vuln/detail/CVE-2021-29657	external
https://bugs.chromium.org/p/project-zero/issues/d…	external
https://access.redhat.com/security/cve/CVE-2021-31440	self
https://bugzilla.redhat.com/show_bug.cgi?id=1964028	external
https://www.cve.org/CVERecord?id=CVE-2021-31440	external
https://nvd.nist.gov/vuln/detail/CVE-2021-31440	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://www.zerodayinitiative.com/blog/2021/5/26/…	external
https://access.redhat.com/security/cve/CVE-2021-31829	self
https://bugzilla.redhat.com/show_bug.cgi?id=1957788	external
https://www.cve.org/CVERecord?id=CVE-2021-31829	external
https://nvd.nist.gov/vuln/detail/CVE-2021-31829	external
https://access.redhat.com/security/cve/CVE-2021-31916	self
https://bugzilla.redhat.com/show_bug.cgi?id=1946965	external
https://www.cve.org/CVERecord?id=CVE-2021-31916	external
https://nvd.nist.gov/vuln/detail/CVE-2021-31916	external
https://github.com/torvalds/linux/commit/4edbe1d7…	external
https://seclists.org/oss-sec/2021/q1/268	external
https://access.redhat.com/security/cve/CVE-2021-33033	self
https://bugzilla.redhat.com/show_bug.cgi?id=1961300	external
https://www.cve.org/CVERecord?id=CVE-2021-33033	external
https://nvd.nist.gov/vuln/detail/CVE-2021-33033	external
https://access.redhat.com/security/cve/CVE-2021-33098	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068236	external
https://www.cve.org/CVERecord?id=CVE-2021-33098	external
https://nvd.nist.gov/vuln/detail/CVE-2021-33098	external
https://access.redhat.com/security/cve/CVE-2021-33200	self
https://bugzilla.redhat.com/show_bug.cgi?id=1965458	external
https://www.cve.org/CVERecord?id=CVE-2021-33200	external
https://nvd.nist.gov/vuln/detail/CVE-2021-33200	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://git.kernel.org/pub/scm/linux/kernel/git/b…	external
https://www.openwall.com/lists/oss-security/2021/…	external
https://access.redhat.com/security/cve/CVE-2021-46905	self
https://bugzilla.redhat.com/show_bug.cgi?id=2266253	external
https://www.cve.org/CVERecord?id=CVE-2021-46905	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46905	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2021-46983	self
https://bugzilla.redhat.com/show_bug.cgi?id=2266906	external
https://www.cve.org/CVERecord?id=CVE-2021-46983	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46983	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2021-47011	self
https://bugzilla.redhat.com/show_bug.cgi?id=2266847	external
https://www.cve.org/CVERecord?id=CVE-2021-47011	external
https://nvd.nist.gov/vuln/detail/CVE-2021-47011	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2021-47080	self
https://bugzilla.redhat.com/show_bug.cgi?id=2267533	external
https://www.cve.org/CVERecord?id=CVE-2021-47080	external
https://nvd.nist.gov/vuln/detail/CVE-2021-47080	external
https://lore.kernel.org/linux-cve-announce/202403…	external
https://access.redhat.com/security/cve/CVE-2021-47226	self
https://bugzilla.redhat.com/show_bug.cgi?id=2282591	external
https://www.cve.org/CVERecord?id=CVE-2021-47226	external
https://nvd.nist.gov/vuln/detail/CVE-2021-47226	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2022-20166	self
https://bugzilla.redhat.com/show_bug.cgi?id=2122089	external
https://www.cve.org/CVERecord?id=CVE-2022-20166	external
https://nvd.nist.gov/vuln/detail/CVE-2022-20166	external
https://access.redhat.com/security/cve/CVE-2022-50042	self
https://bugzilla.redhat.com/show_bug.cgi?id=2373691	external
https://www.cve.org/CVERecord?id=CVE-2022-50042	external
https://nvd.nist.gov/vuln/detail/CVE-2022-50042	external
https://lore.kernel.org/linux-cve-announce/202506…	external
https://access.redhat.com/security/cve/CVE-2022-50073	self
https://bugzilla.redhat.com/show_bug.cgi?id=2373494	external
https://www.cve.org/CVERecord?id=CVE-2022-50073	external
https://nvd.nist.gov/vuln/detail/CVE-2022-50073	external
https://lore.kernel.org/linux-cve-announce/202506…	external
https://access.redhat.com/security/cve/CVE-2023-53578	self
https://bugzilla.redhat.com/show_bug.cgi?id=2401492	external
https://www.cve.org/CVERecord?id=CVE-2023-53578	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53578	external
https://lore.kernel.org/linux-cve-announce/202510…	external
https://access.redhat.com/security/cve/CVE-2023-53598	self
https://bugzilla.redhat.com/show_bug.cgi?id=2401500	external
https://www.cve.org/CVERecord?id=CVE-2023-53598	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53598	external
https://lore.kernel.org/linux-cve-announce/202510…	external
https://access.redhat.com/security/cve/CVE-2023-53607	self
https://bugzilla.redhat.com/show_bug.cgi?id=2401517	external
https://www.cve.org/CVERecord?id=CVE-2023-53607	external
https://nvd.nist.gov/vuln/detail/CVE-2023-53607	external
https://lore.kernel.org/linux-cve-announce/202510…	external

Acknowledgments

IBM Daniel Axtens

Ryota Shiga

ckSec HaoXiong, LinMa

Chaitin Tech Haoran Luo

Red Hat Miklos Szeredi

Loris Reiff

Palo Alto Networks Or Cohen

RedRocket CTF team Manfred Paul

JSON

To clipboard

Loading 2.3 MB of JSON…

CVE-2019-14615 (GCVE-0-2019-14615)

Vulnerability from cvelistv5 – Published: 2020-01-17 17:36 – Updated: 2024-08-05 00:19

Summary

Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.

Severity

No CVSS data available.

CWE

information disclosure

Assigner

intel mitre root

References

19 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://usn.ubuntu.com/4253-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4255-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4255-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4253-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
http://packetstormsecurity.com/files/156185/Kerne…	x_refsource_MISC
http://packetstormsecurity.com/files/156455/Kerne…	x_refsource_MISC
https://usn.ubuntu.com/4285-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4286-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4286-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/kb/HT211100	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2020/Mar/31	mailing-listx_refsource_FULLDISC

Impacted products

1 product

Vendor	Product	Version
Intel	Intel(R) Processors	Affected: various

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:19:41.439Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html"
          },
          {
            "name": "USN-4253-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4253-1/"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4255-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4255-1/"
          },
          {
            "name": "USN-4255-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4255-2/"
          },
          {
            "name": "USN-4253-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4253-2/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html"
          },
          {
            "name": "USN-4285-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4285-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4286-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4286-2/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          },
          {
            "name": "USN-4286-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4286-1/"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT211100"
          },
          {
            "name": "20200324 APPLE-SA-2020-03-24-2 macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2020/Mar/31"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "Intel",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-25T07:06:25.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html"
        },
        {
          "name": "USN-4253-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4253-1/"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4255-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4255-1/"
        },
        {
          "name": "USN-4255-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4255-2/"
        },
        {
          "name": "USN-4253-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4253-2/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html"
        },
        {
          "name": "USN-4285-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4285-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4286-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4286-2/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        },
        {
          "name": "USN-4286-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4286-1/"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT211100"
        },
        {
          "name": "20200324 APPLE-SA-2020-03-24-2 macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2020/Mar/31"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-14615",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html"
            },
            {
              "name": "USN-4253-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4253-1/"
            },
            {
              "name": "USN-4254-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-1/"
            },
            {
              "name": "USN-4255-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4255-1/"
            },
            {
              "name": "USN-4255-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4255-2/"
            },
            {
              "name": "USN-4253-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4253-2/"
            },
            {
              "name": "USN-4254-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-2/"
            },
            {
              "name": "http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html"
            },
            {
              "name": "USN-4285-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4285-1/"
            },
            {
              "name": "USN-4287-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-1/"
            },
            {
              "name": "USN-4286-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4286-2/"
            },
            {
              "name": "USN-4287-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-2/"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "USN-4284-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4284-1/"
            },
            {
              "name": "USN-4286-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4286-1/"
            },
            {
              "name": "openSUSE-SU-2020:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
            },
            {
              "name": "https://support.apple.com/kb/HT211100",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT211100"
            },
            {
              "name": "20200324 APPLE-SA-2020-03-24-2 macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2020/Mar/31"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-14615",
    "datePublished": "2020-01-17T17:36:57.000Z",
    "dateReserved": "2019-08-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:19:41.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15794 (GCVE-0-2019-15794)

Vulnerability from cvelistv5 – Published: 2020-04-23 23:55 – Updated: 2024-09-16 19:52

Title

Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

Summary

Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-672 - Operation on a Resource after Expiration or Release

Assigner

canonical mitre root

References

4 references

URL	Tags
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+…	x_refsource_MISC
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+…	x_refsource_MISC
https://usn.ubuntu.com/usn/usn-4208-1	x_refsource_MISC
https://usn.ubuntu.com/usn/usn-4209-1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Ubuntu	Linux kernel	Affected: 5.3 kernel , < 5.3.0-24.26 (custom) Affected: 5.0 kernel , < 5.0.0-37.40 (custom)

Date Public

2019-11-08 00:00

Credits

Jann Horn of Google Project Zero

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:56:22.473Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=270d16ae48a4dbf1c7e25e94cc3e38b4bea37635"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=ef81780548d20a786cc77ed4203fca146fd81ce3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/usn/usn-4208-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/usn/usn-4209-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel",
          "vendor": "Ubuntu",
          "versions": [
            {
              "lessThan": "5.3.0-24.26",
              "status": "affected",
              "version": "5.3 kernel",
              "versionType": "custom"
            },
            {
              "lessThan": "5.0.0-37.40",
              "status": "affected",
              "version": "5.0 kernel",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jann Horn of Google Project Zero"
        }
      ],
      "datePublic": "2019-11-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma-\u003evm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-672",
              "description": "CWE-672 Operation on a Resource after Expiration or Release",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-23T23:55:24.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=270d16ae48a4dbf1c7e25e94cc3e38b4bea37635"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=ef81780548d20a786cc77ed4203fca146fd81ce3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://usn.ubuntu.com/usn/usn-4208-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://usn.ubuntu.com/usn/usn-4209-1"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.launchpad.net/bugs/1850994"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "DATE_PUBLIC": "2019-11-08T00:00:00.000Z",
          "ID": "CVE-2019-15794",
          "STATE": "PUBLIC",
          "TITLE": "Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.3 kernel",
                            "version_value": "5.3.0-24.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.0 kernel",
                            "version_value": "5.0.0-37.40"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Ubuntu"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Jann Horn of Google Project Zero"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma-\u003evm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-672 Operation on a Resource after Expiration or Release"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=270d16ae48a4dbf1c7e25e94cc3e38b4bea37635",
              "refsource": "MISC",
              "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=270d16ae48a4dbf1c7e25e94cc3e38b4bea37635"
            },
            {
              "name": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=ef81780548d20a786cc77ed4203fca146fd81ce3",
              "refsource": "MISC",
              "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=ef81780548d20a786cc77ed4203fca146fd81ce3"
            },
            {
              "name": "https://usn.ubuntu.com/usn/usn-4208-1",
              "refsource": "MISC",
              "url": "https://usn.ubuntu.com/usn/usn-4208-1"
            },
            {
              "name": "https://usn.ubuntu.com/usn/usn-4209-1",
              "refsource": "MISC",
              "url": "https://usn.ubuntu.com/usn/usn-4209-1"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.launchpad.net/bugs/1850994"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2019-15794",
    "datePublished": "2020-04-23T23:55:25.039Z",
    "dateReserved": "2019-08-29T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:52:18.313Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-0427 (GCVE-0-2020-0427)

Vulnerability from cvelistv5 – Published: 2020-09-17 00:00 – Updated: 2024-08-04 06:02

Summary

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171

Severity

No CVSS data available.

CWE

Information disclosure

Assigner

google_android Google root

References

6 references

URL	Tags
https://source.android.com/security/bulletin/pixe…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2020…	mailing-list
http://packetstormsecurity.com/files/161229/Kerne…
https://www.starwindsoftware.com/security/sw-2021…

Impacted products

1 product

Vendor	Product	Version
n/a	Android	Affected: Android kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:02:52.034Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2020-09-01"
          },
          {
            "name": "openSUSE-SU-2020:1586",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:1655",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html"
          },
          {
            "name": "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.starwindsoftware.com/security/sw-20210325-0005/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-11T00:00:00.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/security/bulletin/pixel/2020-09-01"
        },
        {
          "name": "openSUSE-SU-2020:1586",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:1655",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html"
        },
        {
          "name": "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html"
        },
        {
          "url": "http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html"
        },
        {
          "url": "https://www.starwindsoftware.com/security/sw-20210325-0005/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2020-0427",
    "datePublished": "2020-09-17T00:00:00.000Z",
    "dateReserved": "2019-10-17T00:00:00.000Z",
    "dateUpdated": "2024-08-04T06:02:52.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24502 (GCVE-0-2020-24502)

Vulnerability from cvelistv5 – Published: 2021-02-17 13:38 – Updated: 2024-08-04 15:12

Summary

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.

Severity

No CVSS data available.

CWE

denial of service

Assigner

intel mitre root

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and	Affected: before version 1.0.4 and before version 1.4.29.0 for Windows

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:08.982Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version 1.0.4 and before version 1.4.29.0 for Windows"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-17T13:38:03.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24502",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before version 1.0.4 and before version 1.4.29.0 for Windows"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24502",
    "datePublished": "2021-02-17T13:38:03.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:08.982Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24503 (GCVE-0-2020-24503)

Vulnerability from cvelistv5 – Published: 2021-02-17 13:38 – Updated: 2024-08-04 15:12

Summary

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.

Severity

No CVSS data available.

CWE

information disclosure

Assigner

intel mitre root

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Ethernet E810 Adapter drivers for Linux	Affected: before version 1.0.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:09.180Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Ethernet E810 Adapter drivers for Linux",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version 1.0.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-17T13:38:22.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24503",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Ethernet E810 Adapter drivers for Linux",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before version 1.0.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24503",
    "datePublished": "2021-02-17T13:38:22.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:09.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24504 (GCVE-0-2020-24504)

Vulnerability from cvelistv5 – Published: 2021-02-17 13:37 – Updated: 2024-08-04 15:12

Summary

Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.

Severity

No CVSS data available.

CWE

denial of service

Assigner

intel mitre root

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Ethernet E810 Adapter drivers for Linux	Affected: before version 1.0.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:09.016Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Ethernet E810 Adapter drivers for Linux",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version 1.0.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-17T13:37:27.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24504",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Ethernet E810 Adapter drivers for Linux",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before version 1.0.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24504",
    "datePublished": "2021-02-17T13:37:27.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:09.016Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24586 (GCVE-0-2020-24586)

Vulnerability from cvelistv5 – Published: 2021-05-11 00:00 – Updated: 2024-08-04 15:19

Summary

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…
https://tools.cisco.com/security/center/content/C…	vendor-advisory
https://www.fragattacks.com
https://github.com/vanhoefm/fragattacks/blob/mast…
http://www.openwall.com/lists/oss-security/2021/0…	mailing-list
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://www.arista.com/en/support/advisories-noti…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:19:08.804Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"
          },
          {
            "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.fragattacks.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
          },
          {
            "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
          },
          {
            "name": "[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-01T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"
        },
        {
          "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
        },
        {
          "url": "https://www.fragattacks.com"
        },
        {
          "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
        },
        {
          "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
        },
        {
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
        },
        {
          "name": "[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-24586",
    "datePublished": "2021-05-11T00:00:00.000Z",
    "dateReserved": "2020-08-21T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:19:08.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24587 (GCVE-0-2020-24587)

Vulnerability from cvelistv5 – Published: 2021-05-11 00:00 – Updated: 2024-08-04 15:19

Summary

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…
https://tools.cisco.com/security/center/content/C…	vendor-advisory
https://www.fragattacks.com
https://github.com/vanhoefm/fragattacks/blob/mast…
http://www.openwall.com/lists/oss-security/2021/0…	mailing-list
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://www.arista.com/en/support/advisories-noti…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:19:08.605Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"
          },
          {
            "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.fragattacks.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
          },
          {
            "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
          },
          {
            "name": "[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-01T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"
        },
        {
          "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
        },
        {
          "url": "https://www.fragattacks.com"
        },
        {
          "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
        },
        {
          "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
        },
        {
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
        },
        {
          "name": "[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-24587",
    "datePublished": "2021-05-11T00:00:00.000Z",
    "dateReserved": "2020-08-21T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:19:08.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24588 (GCVE-0-2020-24588)

Vulnerability from cvelistv5 – Published: 2021-05-11 00:00 – Updated: 2026-04-14 08:48

Summary

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…
https://tools.cisco.com/security/center/content/C…	vendor-advisory
https://www.fragattacks.com
https://github.com/vanhoefm/fragattacks/blob/mast…
http://www.openwall.com/lists/oss-security/2021/0…	mailing-list
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://cert-portal.siemens.com/productcert/pdf/s…
https://www.arista.com/en/support/advisories-noti…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

39 products

Vendor	Product	Version
Siemens	SCALANCE W1748-1 M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1750D (JP)	Affected: 0 , < V8.7.1.3 (custom)
Siemens	SCALANCE W1750D (ROW)	Affected: 0 , < V8.7.1.3 (custom)
Siemens	SCALANCE W1750D (USA)	Affected: 0 , < V8.7.1.3 (custom)
Siemens	SCALANCE W1788-1 M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-2 EEC M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-2 M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-2IA M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W721-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W722-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W734-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W734-1 RJ45 (USA)	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W738-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W748-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W748-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W761-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W774-1 M12 EEC	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W774-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W774-1 RJ45 (USA)	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W778-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W778-1 M12 EEC	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W778-1 M12 EEC (USA)	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-2 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-2 SFP	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-2IA RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-2 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-2 M12 EEC	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-2 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE WAM763-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1 (US)	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1 EEC	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1 EEC (US)	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WUM763-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WUM766-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WUM766-1 (USA)	Affected: 0 , < V1.2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:19:08.467Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"
          },
          {
            "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.fragattacks.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
          },
          {
            "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
          },
          {
            "name": "[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1750D (JP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.7.1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1750D (ROW)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.7.1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1750D (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.7.1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 EEC M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2IA M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-14T08:48:59.636Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-913875.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019200.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-01T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"
        },
        {
          "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
        },
        {
          "url": "https://www.fragattacks.com"
        },
        {
          "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
        },
        {
          "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf"
        },
        {
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
        },
        {
          "name": "[debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-24588",
    "datePublished": "2021-05-11T00:00:00.000Z",
    "dateReserved": "2020-08-21T00:00:00.000Z",
    "dateUpdated": "2026-04-14T08:48:59.636Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2020-26139 (GCVE-0-2020-26139)

Vulnerability from cvelistv5 – Published: 2021-05-11 19:37 – Updated: 2026-04-14 08:49

Summary

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
https://www.fragattacks.com	x_refsource_MISC
https://github.com/vanhoefm/fragattacks/blob/mast…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/0…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://www.arista.com/en/support/advisories-noti…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

36 products

Vendor	Product	Version
Siemens	SCALANCE W1748-1 M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-1 M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-2 EEC M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-2 M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W1788-2IA M12	Affected: 0 , < V3.0.0 (custom)
Siemens	SCALANCE W721-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W722-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W734-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W734-1 RJ45 (USA)	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W738-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W748-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W748-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W761-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W774-1 M12 EEC	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W774-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W774-1 RJ45 (USA)	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W778-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W778-1 M12 EEC	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W778-1 M12 EEC (USA)	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-2 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-2 SFP	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W786-2IA RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-1 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-1 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-2 M12	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-2 M12 EEC	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE W788-2 RJ45	Affected: 0 , < V6.6.0 (custom)
Siemens	SCALANCE WAM763-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1 (US)	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1 EEC	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WAM766-1 EEC (US)	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WUM763-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WUM766-1	Affected: 0 , < V1.2.0 (custom)
Siemens	SCALANCE WUM766-1 (USA)	Affected: 0 , < V1.2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:49:07.127Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.fragattacks.com"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
          },
          {
            "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 EEC M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2IA M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-14T08:49:01.511Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-913875.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019200.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-28T14:09:21.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.fragattacks.com"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
        },
        {
          "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-26139",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"
            },
            {
              "name": "https://www.fragattacks.com",
              "refsource": "MISC",
              "url": "https://www.fragattacks.com"
            },
            {
              "name": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md",
              "refsource": "MISC",
              "url": "https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"
            },
            {
              "name": "[oss-security] 20210511 various 802.11 security issues - fragattacks.com",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/05/11/12"
            },
            {
              "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
            },
            {
              "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf"
            },
            {
              "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63",
              "refsource": "MISC",
              "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-26139",
    "datePublished": "2021-05-11T19:37:55.000Z",
    "dateReserved": "2020-09-29T00:00:00.000Z",
    "dateUpdated": "2026-04-14T08:49:01.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2021:4356

CVE-2019-14615 (GCVE-0-2019-14615)

CVE-2019-15794 (GCVE-0-2019-15794)

CVE-2020-0427 (GCVE-0-2020-0427)

CVE-2020-24502 (GCVE-0-2020-24502)

CVE-2020-24503 (GCVE-0-2020-24503)

CVE-2020-24504 (GCVE-0-2020-24504)

CVE-2020-24586 (GCVE-0-2020-24586)

CVE-2020-24587 (GCVE-0-2020-24587)

CVE-2020-24588 (GCVE-0-2020-24588)

CVE-2020-26139 (GCVE-0-2020-26139)

Tags

Sightings

Nomenclature