Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system crash), possibly obtain kernel memory contents, and possibly execute arbitrary code via a large negative array index value.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-wireless/madwifi-ng. | Oct 30, 2017 | May 23, 2007 |
| Ubuntu | — | Upgrade linux-restricted-modules-2.6.15-28-powerpc-smpUpgrade linux-restricted-modules-2.6.15-28-powerpcUpgrade linux-restricted-modules-2.6.17-11-powerpc64-smpUpgrade linux-restricted-modules-2.6.17-11-sparc64-smpUpgrade linux-restricted-modules-2.6.17-11-powerpc-smpUpgrade linux-restricted-modules-2.6.17-11-powerpcUpgrade linux-restricted-modules-2.6.15-28-amd64-k8Upgrade linux-restricted-modules-2.6.15-28-k7Upgrade linux-restricted-modules-2.6.20-16-sparc64-smpUpgrade linux-restricted-modules-2.6.15-28-sparc64Upgrade linux-restricted-modules-2.6.17-11-sparc64Upgrade linux-restricted-modules-2.6.20-16-lowlatencyUpgrade linux-restricted-modules-2.6.20-16-386Upgrade linux-restricted-modules-2.6.20-16-powerpc-smpUpgrade linux-restricted-modules-2.6.15-28-amd64-genericUpgrade linux-restricted-modules-2.6.20-16-powerpcUpgrade linux-restricted-modules-2.6.15-28-amd64-xeonUpgrade linux-restricted-modules-2.6.17-11-386Upgrade linux-restricted-modules-2.6.20-16-powerpc64-smpUpgrade linux-restricted-modules-2.6.20-16-sparc64Upgrade linux-restricted-modules-2.6.20-16-genericUpgrade linux-restricted-modules-2.6.15-28-sparc64-smpUpgrade linux-restricted-modules-2.6.15-28-386Upgrade linux-restricted-modules-2.6.17-11-genericUpgrade linux-restricted-modules-2.6.15-28-686 | Nov 8, 2024 | May 24, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub