CVE-2010-1159

MEDIUM 6.8CVE-2010-1159 · Published 28/10/2013 · updated 16/06/2026

In short

CVE-2010-1159 is a MEDIUM (CVSS 6.8) vulnerability affecting aircrack-ng (aircrack-ng).
Chance of exploitation in the next 30 days (EPSS): 7.3%, higher than 94.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aircrack-ng aircrack-ng	`= 0.1= 0.2= 0.2.1= 0.3= 0.4= 0.4.1= 0.4.2= 0.4.3= 0.4.4= 0.5= 0.6= 0.6.1= 0.6.2= 0.7= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0≤ 1.0`	No fix yet

Description

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.

References

pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py
secunia.com/advisories/39150 · Vendor Advisory
secunia.com/advisories/55053 · Vendor Advisory
security.gentoo.org/glsa/glsa-201310-06.xml · Vendor Advisory
svn.aircrack-ng.org/trunk/ChangeLog

More vulnerabilities in aircrack-ng

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

aircrack-ng

= 0.1= 0.2= 0.2.1= 0.3= 0.4= 0.4.1= 0.4.2= 0.4.3= 0.4.4= 0.5= 0.6= 0.6.1= 0.6.2= 0.7= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0≤ 1.0

No fix yet

More vulnerabilities in aircrack-ng

See all →