{"id":"CVE-2007-5448","aliases":["EUVD-2007-5424","GHSA-jwx5-frfj-fvw3"],"status":"published","title":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a...","description":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01968,"percentile":0.80502,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2007-10-14T18:00:00Z","modified":"2026-06-16T22:46:10Z","products":[{"vendor":"madwifi","product":"madwifi"}],"references":[{"url":"http://www.securityfocus.com/bid/26052","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/27197","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:007","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37182","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securityreason.com/securityalert/3225","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/482168/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/3493","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/27541","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://madwifi.org/changeset/2736","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=195705","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/28431","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.sec-consult.com/298.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5448"},{"url":"https://github.com/advisories/GHSA-jwx5-frfj-fvw3"}],"sources":{"cve":[{"id":"CVE-2007-5448","description":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.","status":"published","published":"2007-10-14T18:00:00Z","modified":"2024-08-07T15:31:58.645Z","updated_at":"2026-11-02T13:32:11.910312Z"}],"euvd":[{"id":"EUVD-2007-5424","description":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.","status":"published","published":"2007-10-14T18:00:00Z","modified":"2024-08-07T15:31:58Z","updated_at":"2026-11-03T01:16:17.258093Z"}],"ghsa":[{"id":"GHSA-jwx5-frfj-fvw3","title":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a...","description":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.","status":"published","published":"2022-05-01T18:33:31Z","modified":"2023-01-31T05:04:46Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:48:43.981291Z"}],"nvd":[{"id":"CVE-2007-5448","description":"Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.","status":"published","published":"2007-10-14T18:17:00Z","modified":"2026-06-16T22:46:10.487Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:22.203764Z"}]}}