CVE-2020-26139

CVE Details

Release Date:	2021-05-11
Impact:	None	What is this?

Description

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

See more information about CVE-2020-26139 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	5.3
Vector String:	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Version:	3.0
Attack Vector:	Adjacent_Network
Attack Complexity:	High
Privileges Required:	None
User Interaction:	None
Scope:	Unchanged
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 6 (kernel-uek)	ELSA-2021-9459	2021-09-22
Oracle Linux version 7 (kernel-uek)	ELSA-2021-9459	2021-09-22
Oracle Linux version 8 (kernel)	ELSA-2021-4356	2021-11-16
Oracle VM version 3 (kernel-uek)	OVMSA-2021-0031	2021-09-22