What’s Vulnerable › Vulnerabilities

CVE-2010-1159

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-10-28 · updated 2026-06-16
• Weakness: CWE-119

Description

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.

Affected products

• Aircrack-Ng: through 1.0; 0.1, 0.2, 0.2.1, 0.3, 0.4, 0.4.1 (+19)
• gentoo Linux: all versions

References

• http://pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py
• http://secunia.com/advisories/39150
• http://secunia.com/advisories/55053
• http://security.gentoo.org/glsa/glsa-201310-06.xml
• http://svn.aircrack-ng.org/trunk/ChangeLog
• http://pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py
• http://secunia.com/advisories/39150
• http://secunia.com/advisories/55053
• http://security.gentoo.org/glsa/glsa-201310-06.xml
• http://svn.aircrack-ng.org/trunk/ChangeLog

Get alerted when CVE-2010-1159 or the next vulnerability affects your stack