VDB
DEBIAN-CVE-2020-24587
DEBIAN-CVE-2020-24587
PUBLISHED
CVSS 2.5999999046325684 LOW
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Risk Scores
CVSS 3.1
2.5999999046325684
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | firmware-nonfree | 20210716-1~exp1, 20210511-1~exp1, 20210818-1~bpo11+1 |
| Debian:13 | linux | 0 |
| Debian:14 | linux | 0 |
| Debian:13 | firmware-nonfree | 20201218-2, 0, 0.1 |
| Debian:12 | firmware-nonfree | 20210716-1~exp1, 0, 0.1 |
| Debian:12 | linux | 0 |
Timeline
- May 11, 2021 CVE Published
- Oct 26, 2026 CVE Updated