CVE-2020-26142 Other in n/a
An attacker can inject arbitrary network packets by exploiting how the OpenBSD kernel handles fragmented frames in WEP, WPA, WPA2, and WPA3 implementations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-26142?
CVE-2020-26142 is a medium-severity vulnerability in Openbsd Openbsd, published on 11 May 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration.
Weakness: CWE-74
Which versions are affected by CVE-2020-26142?
It affects 1 product.
Products include Openbsd Openbsd.
How do I fix CVE-2020-26142?
Apply the vendor's patch.
Is CVE-2020-26142 being exploited?
There is no known exploitation of CVE-2020-26142 in the wild and no public exploit code.
Other vulnerabilities in Openbsd Openbsd
Sources
Also known as GHSA-f2g3-x645-4qw2, ROOT-OS-UBUNTU-2204-CVE-2020-26142, UBUNTU-CVE-2020-26142.