Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 May 2021 13:16:55 +0000
From:      bugzilla-noreply@freebsd.org
To:        wireless@FreeBSD.org
Subject:   [Bug 256119] [net80211] [patch]: mitigate A-MSDU FragAttacks design flaw
Message-ID:  <bug-256119-21060@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D256119

            Bug ID: 256119
           Summary: [net80211] [patch]: mitigate A-MSDU FragAttacks design
                    flaw
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: wireless
          Assignee: wireless@FreeBSD.org
          Reporter: mathy.vanhoef@cs.kuleuven.be

Created attachment 225221
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D225221&action=
=3Dedit
patch: git diff file

FreeBSD is also affected by the A-MSDU design flaw in Wi-Fi (CVE-2020-24588=
).
For background see Section 3 in https://papers.mathyvanhoef.com/usenix2021.=
pdf

This vulnerability can be reproduced using the FragAttack test tool at
https://github.com/vanhoefm/fragattacks with the test case "amsdu-inject-ba=
d"
(the injected ping request should be rejected by the kernel).

The attached patches fixes this vulnerability. It was tested using a Belkin
F5D8053 (run driver) in client mode.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-256119-21060>