PT-2021-3355 · Samsung+4 · Samsung Galaxy S3+4

Mathy Vanhoef · Published 2021-05-11 · Updated 2021-12-06 · CVE-2020-26146

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) Samsung Galaxy S3 i9305 version 4.4.4

Description The issue exists due to insufficient input validation in the implementation of WEP, WPA, WPA2, and WPA3 algorithms. An adversary can exploit this by sending specially crafted fragmented frames, encrypted using WEP, CCMP, or GCMP, allowing them to impact the integrity of protected information. This can be achieved when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

Recommendations For Linux kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Samsung Galaxy S3 i9305 version 4.4.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2021:4356

ASB-A-175626808

BDU:2021-03176

CESA-2021_4140

CESA-2021_4356

CVE-2020-26146

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

Affected Products

Almalinux

Centos

Check Point Gaia

Red Hat

Samsung Galaxy S3

References · 76

• https://ubuntu.com/security/CVE-2020-26146 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-26146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26146 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26146 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26146 · Security Note
• https://linux.oracle.com/errata/ELSA-2021-4356.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-26146 · Security Note
• https://bdu.fstec.ru/vul/2021-03176 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9459.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:4356 · Vendor Advisory
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md · Note
• https://vulners.com/cve/CVE-2020-24588 · Note
• https://vulners.com/cve/CVE-2021-3348 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-913875.html · Note