Aircrack-ng 'buddy-ng.c' Denial of Service Vulnerability

Bugtraq ID:	71085
Class:	Input Validation Error
CVE:	CVE-2014-8323
Remote:	Yes
Local:	No
Published:	Nov 01 2014 12:00AM
Updated:	May 07 2015 05:12PM
Credit:	Nick Sampanis
Vulnerable:	Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Gentoo Linux Aircrack-ng Aircrack-ng 0.4.4 Aircrack-ng Aircrack-ng 1.2 Beta1 Aircrack-ng Aircrack-ng 1.2 Beta 3 Aircrack-ng Aircrack-ng 1.0 Rc4 Aircrack-ng Aircrack-ng 1.0 RC3 Aircrack-ng Aircrack-ng 1.0 Rc2 Aircrack-ng Aircrack-ng 1.0 Rc1 Aircrack-ng Aircrack-ng 1.0 Beta2 Aircrack-ng Aircrack-ng 1.0 Beta1 Aircrack-ng Aircrack-ng 1.0 Aircrack-ng Aircrack-ng 0.9.3 Aircrack-ng Aircrack-ng 0.9.2 Aircrack-ng Aircrack-ng 0.9.1 Aircrack-ng Aircrack-ng 0.8 Aircrack-ng Aircrack-ng 0.7 Aircrack-ng Aircrack-ng 0.6.2 Aircrack-ng Aircrack-ng 0.6.1 Aircrack-ng Aircrack-ng 0.6 Aircrack-ng Aircrack-ng 0.5 Aircrack-ng Aircrack-ng 0.4.3 Aircrack-ng Aircrack-ng 0.4.2 Aircrack-ng Aircrack-ng 0.4.1 Aircrack-ng Aircrack-ng 0.4 Aircrack-ng Aircrack-ng 0.3 Aircrack-ng Aircrack-ng 0.2.1 Aircrack-ng Aircrack-ng 0.2 Aircrack-ng Aircrack-ng 0.1
Not Vulnerable:

Aircrack-ng 'buddy-ng.c' Denial of Service Vulnerability

Aircrack-ng is prone to a denial-of-service vulnerability because it fails to check the data format.

A remote attacker can exploit this issue to cause a denial-of-service condition.

Aircrack-ng 1.2 Beta 3 and prior are vulnerable.

Aircrack-ng 'buddy-ng.c' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Aircrack-ng 'buddy-ng.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva aircrack-ng-1.1-5.3.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/