CVE-2020-26145

2021-05-1100:00:00

ubuntu.com

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

23.8%

JSON

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP,
WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast
fragments even when sent in plaintext and process them as full unfragmented
frames. An adversary can abuse this to inject arbitrary network packets
independent of the network configuration.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux< 5.4.0-77.86UNKNOWN
ubuntu20.10noarchlinux< 5.8.0-59.66UNKNOWN
ubuntu21.04noarchlinux< 5.11.0-22.23UNKNOWN
ubuntu18.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1051.53UNKNOWN
ubuntu20.10noarchlinux-aws< 5.8.0-1038.40UNKNOWN
ubuntu21.04noarchlinux-aws< 5.11.0-1011.11UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1051.53~18.04.1UNKNOWN
ubuntu20.04noarchlinux-aws-5.8< 5.8.0-1038.40~20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-77.86	UNKNOWN
ubuntu	20.10	noarch	linux	< 5.8.0-59.66	UNKNOWN
ubuntu	21.04	noarch	linux	< 5.11.0-22.23	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1051.53	UNKNOWN
ubuntu	20.10	noarch	linux-aws	< 5.8.0-1038.40	UNKNOWN
ubuntu	21.04	noarch	linux-aws	< 5.11.0-1011.11	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1051.53~18.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.8	< 5.8.0-1038.40~20.04.1	UNKNOWN