Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1159
HistoryOct 28, 2013 - 12:00 a.m.

CVE-2010-1159

2013-10-2800:00:00
ubuntu.com
ubuntu.com
12

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.426

Percentile

97.3%

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote
attackers to cause a denial of service (crash) and execute arbitrary code
via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.

Bugs

Notes

Author Note
mdeslaur 1.1 was released with r1676, but more issues where discovered after release.

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.426

Percentile

97.3%