CVE-2010-1159

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
aircrack-ngaircrack-ng
𝑥
≤ 1.0
aircrack-ngaircrack-ng
0.1
aircrack-ngaircrack-ng
0.2
aircrack-ngaircrack-ng
0.2.1
aircrack-ngaircrack-ng
0.3
aircrack-ngaircrack-ng
0.4
aircrack-ngaircrack-ng
0.4.1
aircrack-ngaircrack-ng
0.4.2
aircrack-ngaircrack-ng
0.4.3
aircrack-ngaircrack-ng
0.4.4
aircrack-ngaircrack-ng
0.5
aircrack-ngaircrack-ng
0.6
aircrack-ngaircrack-ng
0.6.1
aircrack-ngaircrack-ng
0.6.2
aircrack-ngaircrack-ng
0.7
aircrack-ngaircrack-ng
0.8
aircrack-ngaircrack-ng
0.9
aircrack-ngaircrack-ng
0.9.1
aircrack-ngaircrack-ng
0.9.2
aircrack-ngaircrack-ng
0.9.3
aircrack-ngaircrack-ng
1.0:beta1
aircrack-ngaircrack-ng
1.0:beta2
aircrack-ngaircrack-ng
1.0:rc1
aircrack-ngaircrack-ng
1.0:rc2
aircrack-ngaircrack-ng
1.0:rc3
aircrack-ngaircrack-ng
1.0:rc4
gentoolinux
*
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
aircrack-ng
bullseye
1:1.6+git20210130.91820bc-1
fixed
lenny
no-dsa
etch
no-dsa
bookworm
1:1.7-5
fixed
sid
1:1.7+git20230807.4bf83f1a-2
fixed
trixie
1:1.7+git20230807.4bf83f1a-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
aircrack-ng
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
dne
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
karmic
ignored
hardy
ignored
dapper
dne