Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local users to execute arbitrary code or gain privileges via unspecified vectors.

The remote host is affected by the vulnerability described in GLSA-201411-08 (Aircrack-ng: User-assisted execution of arbitrary code)

    Multiple vulnerabilities have been discovered in Aircrack-ng. Please       review the CVE identifiers referenced below for details.
  Impact :

    A local attacker can use this flaw to execute arbitrary code or gain       escalated privileges. A remote attacker execute arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Security fix for CVE-2014-8321, CVE-2014-8322, CVE-2014-8323, CVE-2014-8324

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
79416	GLSA-201411-08 : Aircrack-ng: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
79237	Fedora 20 : aircrack-ng-1.2-0.3.rc1.fc20 (2014-14247)	Nessus	Fedora Local Security Checks	high
79236	Fedora 19 : aircrack-ng-1.2-0.3.rc1.fc19 (2014-14233)	Nessus	Fedora Local Security Checks	high
79098	Fedora 21 : aircrack-ng-1.2-0.5rc1.fc21 (2014-14283)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-8321

high

Tenable Plugins

critical

high

high

high