Aircrack-ng 'src/aireplay-ng.c' Stack Buffer Overflow Vulnerability

Bugtraq ID:	71084
Class:	Boundary Condition Error
CVE:	CVE-2014-8322
Remote:	Yes
Local:	No
Published:	Nov 01 2014 12:00AM
Updated:	Apr 13 2015 09:21PM
Credit:	Nick Sampanis
Vulnerable:	Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Gentoo Linux Aircrack-ng Aircrack-ng 0.4.4 Aircrack-ng Aircrack-ng 1.2 Beta1 Aircrack-ng Aircrack-ng 1.2 Beta 3 Aircrack-ng Aircrack-ng 1.0 Rc4 Aircrack-ng Aircrack-ng 1.0 RC3 Aircrack-ng Aircrack-ng 1.0 Rc2 Aircrack-ng Aircrack-ng 1.0 Rc1 Aircrack-ng Aircrack-ng 1.0 Beta2 Aircrack-ng Aircrack-ng 1.0 Beta1 Aircrack-ng Aircrack-ng 1.0 Aircrack-ng Aircrack-ng 0.9.3 Aircrack-ng Aircrack-ng 0.9.2 Aircrack-ng Aircrack-ng 0.9.1 Aircrack-ng Aircrack-ng 0.8 Aircrack-ng Aircrack-ng 0.7 Aircrack-ng Aircrack-ng 0.6.2 Aircrack-ng Aircrack-ng 0.6.1 Aircrack-ng Aircrack-ng 0.6 Aircrack-ng Aircrack-ng 0.5 Aircrack-ng Aircrack-ng 0.4.3 Aircrack-ng Aircrack-ng 0.4.2 Aircrack-ng Aircrack-ng 0.4.1 Aircrack-ng Aircrack-ng 0.4 Aircrack-ng Aircrack-ng 0.3 Aircrack-ng Aircrack-ng 0.2.1 Aircrack-ng Aircrack-ng 0.2 Aircrack-ng Aircrack-ng 0.1
Not Vulnerable:

Aircrack-ng 'src/aireplay-ng.c' Stack Buffer Overflow Vulnerability

Aircrack-ng is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

A remote attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed attempts will likely cause a denial-of-service condition.

Aircrack-ng 1.2 Beta 3 and prior are vulnerable.

Aircrack-ng 'src/aireplay-ng.c' Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva aircrack-ng-1.1-5.3.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Aircrack-ng 'src/aireplay-ng.c' Stack Buffer Overflow Vulnerability

References:

• Bug 1159812 - (CVE-2014-8321, CVE-2014-8322, CVE-2014-8323, CVE-2014-8324) CVE- (Red Hat Bugzilla)
  
• Aircrack-ng Home Page (Aircrack-ng)
  
• Aireplay-ng: Fixed tcp_test stack overflow (Mister-X)