CVE-2026-56101: fallo de gravedad media en OpenBSD
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6epss 0.6%
OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by more than 60 seconds. Attackers can exploit the reversed TKIP MIC failure countermeasure window check to deauthenticate all associated TKIP stations and block reassociation for up to 90 seconds, while within-window MIC failures that should engage countermeasures are silently discarded, leaving key-recovery attempts undetected.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
OpenBSD · OpenBSDPoCs públicas encontradas — 1
cve_referencepop.argus-systems.ai/advisory/adv-209.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — OpenBSD
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-52558HIGHOpenBSD 7.4 and 7.3 m_split() network buffer kernel crashEPSS 0.7%CVE-2023-52557HIGHOpenBSD 7.3 invalid l2tp message npppd crashEPSS 0.6%CVE-2025-30334HIGHOpenBSD wg(4) kernel crashEPSS 0.4%CVE-2024-11148HIGHOpenBSD httpd(8) null dereferenceEPSS 0.4%CVE-2024-10934CRITICALOpenBSD NFS double-free vulnerabilityEPSS 0.4%CVE-2026-103547CRITICALCVE-2026-103547EPSS 0.4%