{"id":"CVE-2014-8324","aliases":["DEBIAN-CVE-2014-8324","EUVD-2014-8165","GHSA-c37m-6w24-rcv9","MGASA-2015-0035"],"status":"published","title":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service ...","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04172,"percentile":0.90966,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2015-01-24T14:32:04Z","modified":"2026-10-23T16:01:43Z","fixes":[{"ecosystem":"Debian:12","package":"aircrack-ng","fixed_in":["1:1.2-0~beta3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"aircrack-ng","fixed_in":["1:1.2-0~beta3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"aircrack-ng","fixed_in":["1:1.2-0~beta3-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"aircrack-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2-0~beta3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"aircrack-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2-0~beta3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"aircrack-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2-0~beta3-2"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"aircrack-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-7.2.mga4"}]}],"bundled":3}],"products":[{"vendor":"aircrack-ng","product":"aircrack-ng"}],"references":[{"url":"http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","advisory","report"]},{"url":"http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","VDB Entry","advisory","fix"]},{"url":"http://security.gentoo.org/glsa/glsa-201411-08.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/aircrack-ng/aircrack-ng/commit/88702a3ce4c28a973bf69023cd0312f412f6193e","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143606.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/533869/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159812","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8324"},{"url":"https://github.com/advisories/GHSA-c37m-6w24-rcv9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8324","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0035.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14557","tags":["report"]},{"url":"https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1401/","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-8324","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","status":"published","published":"2017-10-17T14:00:00Z","modified":"2024-08-06T13:10:51.244Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8165","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","status":"published","published":"2017-10-17T14:00:00Z","modified":"2024-08-06T13:10:51Z","updated_at":"2026-11-03T01:56:52.443165Z"}],"ghsa":[{"id":"GHSA-c37m-6w24-rcv9","title":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service ...","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","status":"published","published":"2022-05-14T02:50:48Z","modified":"2023-02-02T05:06:26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:18.649117Z"}],"nvd":[{"id":"CVE-2014-8324","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","status":"published","published":"2017-10-17T14:29:00.29Z","modified":"2026-06-17T00:16:33.567Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:59.001778Z"}],"osv":[{"id":"CVE-2014-8324","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","status":"published","published":"2017-10-17T14:29:00Z","modified":"2026-04-16T06:25:25.378435327Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-8324","description":"network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.","status":"published","published":"2017-10-17T14:29:00.29Z","modified":"2026-10-23T16:01:43.998827181Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"MGASA-2015-0035","title":"Updated aircrack-ng packages fix security vulnerabilities","description":"Updated aircrack-ng package fixes security vulnerabilities:\n\nA length parameter inconsistency in Aircrack-ng before 1.2-rc1 at aireplay\ntcp_test() which may lead to remote code execution (CVE-2014-8322).\n\nA missing check for data format in Aircrack-ng before 1.2-rc1 at buddy-ng\nwhich may lead to denial of service (CVE-2014-8323).\n\nA missing check for invalid values in Aircrack-ng before 1.2-rc1 at airserv-ng\nnet_get() which may lead to denial of service (CVE-2014-8324).\n","status":"published","published":"2015-01-24T14:32:04Z","modified":"2026-04-16T06:24:28.571801551Z","updated_at":"2026-11-02T15:49:39.488462Z"}]}}