Note:
This project will be discontinued after December 13, 2021. [more]
2017-10-17
network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.
| Products | Aircrack\-Ng |
| Type | Improper Input Validation (CWE-20) |
| First patch |
https://github.com/aircrack-ng/aircrack-ng/commit/88702a3ce4c28a973bf69023cd0312f412f6193e |
| Relevant file/s | ./src/osdep/network.c (modified, +1, -1) |
| Links |
• http://www.securityfocus.com/archive/1/533869/100/0/threaded
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html • http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html • http://security.gentoo.org/glsa/glsa-201411-08.xml • http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143606.html |
Navigation
Patch data:
Patched area:
(on by default)
Patched area: