Lucene search
RedhatCVE-2010-1159HistoryOct 28, 2013 - 10:55 p.m.
CVE-2010-1159
2013-10-2822:55:03
CWE-119
redhat
web.nvd.nist.gov
37
cve-2010-1159
aircrack-ng
buffer overflow
denial of service
remote code execution
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.426
Percentile
97.3%
Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.
Affected configurations
Node
aircrack-ngaircrack-ngRange≤1.0
ORaircrack-ngaircrack-ngMatch0.1
ORaircrack-ngaircrack-ngMatch0.2
ORaircrack-ngaircrack-ngMatch0.2.1
ORaircrack-ngaircrack-ngMatch0.3
ORaircrack-ngaircrack-ngMatch0.4
ORaircrack-ngaircrack-ngMatch0.4.1
ORaircrack-ngaircrack-ngMatch0.4.2
ORaircrack-ngaircrack-ngMatch0.4.3
ORaircrack-ngaircrack-ngMatch0.4.4
ORaircrack-ngaircrack-ngMatch0.5
ORaircrack-ngaircrack-ngMatch0.6
ORaircrack-ngaircrack-ngMatch0.6.1
ORaircrack-ngaircrack-ngMatch0.6.2
ORaircrack-ngaircrack-ngMatch0.7
ORaircrack-ngaircrack-ngMatch0.8
ORaircrack-ngaircrack-ngMatch0.9
ORaircrack-ngaircrack-ngMatch0.9.1
ORaircrack-ngaircrack-ngMatch0.9.2
ORaircrack-ngaircrack-ngMatch0.9.3
ORaircrack-ngaircrack-ngMatch1.0beta1
ORaircrack-ngaircrack-ngMatch1.0beta2
ORaircrack-ngaircrack-ngMatch1.0rc1
ORaircrack-ngaircrack-ngMatch1.0rc2
ORaircrack-ngaircrack-ngMatch1.0rc3
ORaircrack-ngaircrack-ngMatch1.0rc4
ORgentoolinux
| Vendor | Product | Version | CPE |
|---|---|---|---|
| aircrack-ng | aircrack-ng | * | cpe:2.3:a:aircrack-ng:aircrack-ng:*:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.1 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.1:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.2 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.2:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.2.1 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.2.1:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.3 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.3:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.4 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.4:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.4.1 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.1:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.4.2 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.2:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.4.3 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.3:*:*:*:*:*:*:* |
| aircrack-ng | aircrack-ng | 0.4.4 | cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.4:*:*:*:*:*:*:* |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0307)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201310-06
2015-09-29 00:00:00
gentoo
gentoo
Aircrack-ng: User-assisted execution of arbitrary code
2013-10-07 00:00:00
mageia
mageia
Updated aircrack-ng package fixes security vulnerability
2013-10-17 23:01:10
prion
prion
Heap overflow
2013-10-28 22:55:00
nessus
nessus
Mandriva Linux Security Advisory : aircrack-ng (MDVSA-2013:251)
2013-10-20 00:00:00
GLSA-201310-06 : Aircrack-ng: User-assisted execution of arbitrary code
2013-10-08 00:00:00
nvd
nvd
CVE-2010-1159
2013-10-28 22:55:03
ubuntucve
ubuntucve
CVE-2010-1159
2013-10-28 00:00:00
debiancve
debiancve
CVE-2010-1159
2013-10-28 22:55:03
exploitdb
exploitdb
Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow (PoC)
2010-04-14 00:00:00
cvelist
cvelist
CVE-2010-1159
2013-10-28 22:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.426
Percentile
97.3%
Related for CVE-2010-1159