CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
97.3%
Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote
attackers to cause a denial of service (crash) and execute arbitrary code
via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.
Author | Note |
---|---|
mdeslaur | 1.1 was released with r1676, but more issues where discovered after release. |