The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 21, 2012 |
| Suse | — | Upgrade ofed-kmp-rtUpgrade kernel-vanilla-baseUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-rt-baseUpgrade kernel-develUpgrade kernel-debug-develUpgrade iscsitarget-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2Upgrade kernel-desktopUpgrade kernel-paeUpgrade ocfs2-kmp-rt_traceUpgrade drbd-kmp-rtUpgrade kernel-traceUpgrade kernel-rt-develUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-vanillaUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-xenUpgrade brocade-bna-kmp-rtUpgrade kernel-symsUpgrade kernel-default-develUpgrade cluster-network-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-vmiUpgrade kernel-desktop-develUpgrade kernel-ec2-extraUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade kernel-vmi-develUpgrade kernel-vanilla-develUpgrade kernel-rt_traceUpgrade kernel-syms-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-source-rtUpgrade preload-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade preload-kmp-desktopUpgrade kernel-rt_trace-baseUpgrade kernel-desktop-baseUpgrade kernel-vmi-base | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.32-29-386 | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub