{"id":"CVE-2020-24586","details":"The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.","modified":"2026-04-16T04:30:37.444719608Z","published":"2021-05-11T20:15:08.537Z","related":["ALSA-2021:4356","SUSE-SU-2021:14764-1","SUSE-SU-2021:1887-1","SUSE-SU-2021:1888-1","SUSE-SU-2021:1889-1","SUSE-SU-2021:1890-1","SUSE-SU-2021:1891-1","SUSE-SU-2021:1899-1","SUSE-SU-2021:1912-1","SUSE-SU-2021:1913-1","SUSE-SU-2021:1975-1","SUSE-SU-2021:1977-1","SUSE-SU-2021:2208-1","SUSE-SU-2021:2406-1","SUSE-SU-2021:2421-1","SUSE-SU-2021:2451-1","openSUSE-SU-2021:0843-1","openSUSE-SU-2021:0947-1","openSUSE-SU-2021:1975-1","openSUSE-SU-2021:1977-1","openSUSE-SU-2024:10728-1","openSUSE-SU-2024:13704-1"],"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/05/11/12"},{"type":"ADVISORY","url":"https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"},{"type":"ADVISORY","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"},{"type":"ADVISORY","url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"},{"type":"ADVISORY","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html"},{"type":"EVIDENCE","url":"https://www.fragattacks.com"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"9.0"}]},{"events":[{"introduced":"0"},{"fixed":"10.0.1-31"}]},{"events":[{"introduced":"0"},{"fixed":"10.0.1-31"}]},{"events":[{"introduced":"0"},{"fixed":"10.0.1-31"}]},{"events":[{"introduced":"0"},{"fixed":"10.0.1-31"}]},{"events":[{"introduced":"0"},{"fixed":"11.0.0-36"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"22.30.0.11"}]},{"events":[{"introduced":"0"},{"fixed":"20.70.21.2"}]},{"events":[{"introduced":"0"},{"fixed":"20.70.21.2"}]},{"events":[{"introduced":"0"},{"fixed":"19.51.33.1"}]},{"events":[{"introduced":"0"},{"fixed":"19.51.33.1"}]},{"events":[{"introduced":"0"},{"fixed":"19.51.33.1"}]},{"events":[{"introduced":"4.4"},{"fixed":"4.4.271"}]},{"events":[{"introduced":"4.9"},{"fixed":"4.9.271"}]},{"events":[{"introduced":"4.14"},{"fixed":"4.14.235"}]},{"events":[{"introduced":"4.19"},{"fixed":"4.19.193"}]},{"events":[{"introduced":"5.4"},{"fixed":"5.4.124"}]},{"events":[{"introduced":"5.10"},{"fixed":"5.10.42"}]},{"events":[{"introduced":"5.12"},{"fixed":"5.12.9"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-24586.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}]}