Aircrack-ng 'network.c' Denial of Service Vulnerability

Bugtraq ID:	71342
Class:	Input Validation Error
CVE:	CVE-2014-8324
Remote:	Yes
Local:	No
Published:	Nov 01 2014 12:00AM
Updated:	Apr 13 2015 09:32PM
Credit:	Nick Sampanis
Vulnerable:	Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Gentoo Linux Aircrack-ng Aircrack-ng 0.4.4 Aircrack-ng Aircrack-ng 1.2 Beta1 Aircrack-ng Aircrack-ng 1.2 Beta 3 Aircrack-ng Aircrack-ng 1.0 Rc4 Aircrack-ng Aircrack-ng 1.0 RC3 Aircrack-ng Aircrack-ng 1.0 Rc2 Aircrack-ng Aircrack-ng 1.0 Rc1 Aircrack-ng Aircrack-ng 1.0 Beta2 Aircrack-ng Aircrack-ng 1.0 Beta1 Aircrack-ng Aircrack-ng 1.0 Aircrack-ng Aircrack-ng 0.9.3 Aircrack-ng Aircrack-ng 0.9.2 Aircrack-ng Aircrack-ng 0.9.1 Aircrack-ng Aircrack-ng 0.8 Aircrack-ng Aircrack-ng 0.7 Aircrack-ng Aircrack-ng 0.6.2 Aircrack-ng Aircrack-ng 0.6.1 Aircrack-ng Aircrack-ng 0.6 Aircrack-ng Aircrack-ng 0.5 Aircrack-ng Aircrack-ng 0.4.3 Aircrack-ng Aircrack-ng 0.4.2 Aircrack-ng Aircrack-ng 0.4.1 Aircrack-ng Aircrack-ng 0.4 Aircrack-ng Aircrack-ng 0.3 Aircrack-ng Aircrack-ng 0.2.1 Aircrack-ng Aircrack-ng 0.2 Aircrack-ng Aircrack-ng 0.1
Not Vulnerable:

Aircrack-ng 'network.c' Denial of Service Vulnerability

Aircrack-ng is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to cause a denial-of-service condition.

Aircrack-ng 1.2 Beta 3 and prior are vulnerable.

Aircrack-ng 'network.c' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Aircrack-ng 'network.c' Denial of Service Vulnerability

References:

• Bug 1159812 - (CVE-2014-8321, CVE-2014-8322, CVE-2014-8323, CVE-2014-8324) CVE- (Red Hat Bugzilla)
  
• Aircrack-ng Home Page (Aircrack-ng)
  
• OSdep: Fixed segmentation fault that happens with a malicious server (Aircrack-ng)