CVE-2010-1159

Опубликовано: 28 окт. 2013

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.

Ссылки

http://pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py
http://secunia.com/advisories/39150
Vendor Advisory
http://secunia.com/advisories/55053
Vendor Advisory
http://security.gentoo.org/glsa/glsa-201310-06.xml
Vendor Advisory
http://svn.aircrack-ng.org/trunk/ChangeLog
http://pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py
http://secunia.com/advisories/39150
Vendor Advisory
http://secunia.com/advisories/55053
Vendor Advisory
http://security.gentoo.org/glsa/glsa-201310-06.xml
Vendor Advisory
http://svn.aircrack-ng.org/trunk/ChangeLog

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aircrack-ng:aircrack-ng:*:*:*:*:*:*:*:*

Версия до 1.0 (включая)

cpe:2.3:a:aircrack-ng:aircrack-ng:0.1:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.2:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.3:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.4:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.5:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.6:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.7:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.8:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.9:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:beta2:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc4:*:*:*:*:*:*

cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.26396

Средний

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2010-1159

ubuntu

около 12 лет назад

CVE-2010-1159

debian

около 12 лет назад

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow r ...

GHSA-r9j6-pqgc-4768

github

больше 3 лет назад

EPSS

Процентиль: 96%

0.26396

Средний

6.8 Medium

CVSS2

Дефекты

CWE-119