Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value.

Updated aircrack-ng package fixes security vulnerabilities :

A length parameter inconsistency in Aircrack-ng before 1.2-rc1 at aireplay tcp_test() which may lead to remote code execution (CVE-2014-8322).

A missing check for data format in Aircrack-ng before 1.2-rc1 at buddy-ng which may lead to denial of service (CVE-2014-8323).

A missing check for invalid values in Aircrack-ng before 1.2-rc1 at airserv-ng net_get() which may lead to denial of service (CVE-2014-8324).

The remote host is affected by the vulnerability described in GLSA-201411-08 (Aircrack-ng: User-assisted execution of arbitrary code)

    Multiple vulnerabilities have been discovered in Aircrack-ng. Please       review the CVE identifiers referenced below for details.
  Impact :

    A local attacker can use this flaw to execute arbitrary code or gain       escalated privileges. A remote attacker execute arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Security fix for CVE-2014-8321, CVE-2014-8322, CVE-2014-8323, CVE-2014-8324

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
81194	Mandriva Linux Security Advisory : aircrack-ng (MDVSA-2015:028)	Nessus	Mandriva Local Security Checks	low
79416	GLSA-201411-08 : Aircrack-ng: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
79237	Fedora 20 : aircrack-ng-1.2-0.3.rc1.fc20 (2014-14247)	Nessus	Fedora Local Security Checks	high
79236	Fedora 19 : aircrack-ng-1.2-0.3.rc1.fc19 (2014-14233)	Nessus	Fedora Local Security Checks	high
79098	Fedora 21 : aircrack-ng-1.2-0.5rc1.fc21 (2014-14283)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-8322

critical

Tenable Plugins

low

critical

high

high

high