FragAttacks: New Security Vulnerabilities Affecting WiFi Devices, 12 CVEs Issued
Written by Michael Larabel in Linux Security on 12 May 2021 at 08:37 AM EDT. 27 Comments
LINUX SECURITY --
FragAttacks was made public on Tuesday as a set of new security vulnerabilities affecting WiFi devices. These are just not some driver-level bugs but rather three of the vulnerabilities are attributed as design flaws in the WiFi standard itself and in turn most devices on the market.

The FragAttacks researchers believe, "experiments indicate that every Wi-Fi product is affected by at least one vulnerability and that most products are affected by several vulnerabilities." WEP through WPA3 WiFi security is believed to be impacted but the researchers did also acknowledge "the design flaws are hard to abuse". Below is a video demonstration of some FragAttacks vulnerabilities in action:


FragAttacks encompasses plaintext injection vulnerabilities, the frame aggregation feature of WiFi potentially leading to an aggregation attack, the frame fragmentation feature of WiFi leading to a possible mixed key attack, and the WiFi frame fragmentation feature being exploited for a possible fragment cache attack. A dozen CVEs in total were issued for this FragAttacks research.


More details on these WiFi vulnerabilities at FragAttacks.com.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Popular News This Week