DEBIAN-CVE-2020-24587

Advisory lineage Upstream: 1 Downstream: 3
Upstream
CVE-2020-24587
Published: 11 May 2021, 20:15
Last modified:28 Apr 2026, 20:21

Vulnerability Summary

Overall Risk (default)
low
10/100
CVSS Score
2.6 LOW
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 May 2021, 20:15
Published
Vulnerability first disclosed
28 Apr 2026, 20:21
Last Modified
Vulnerability information updated

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

CVSS Metrics

  • v3.1•LOW•Score: 2.6CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected Systems

  • debian•firmware-nonfree

    all | < 20210818-1 | < 20210818-1 | < 20210818-1

  • debian•linux

    < 5.10.46-1 | < 5.10.46-1 | < 5.10.46-1 | < 5.10.46-1

References (1)