UBUNTU-CVE-2020-26140
Dashboard / Vulnerabilities / UBUNTU-CVE-2020-26140
Summary:
Details: An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
References: https://ubuntu.com/security/CVE-2020-26140, https://papers.mathyvanhoef.com/usenix2021.pdf, https://lore.kernel.org/linux-wireless/[email protected]/, https://www.cve.org/CVERecord?id=CVE-2020-26140
Affected packages
Package
Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra-legacy%2Ftrusty
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
3.11.0-12.19
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
