CVE:CVE-2010-1159
CNNVD:CNNVD-201310-560
Aircrack-ng是一套用于破解无线802.11 WEP及WPA-PSK加密的工具。该工具主要使用FMS和KoreK两种攻击方式进行WEP破解。
Aircrack-ng 1.1之前的版本中存在基于堆的缓冲区溢出漏洞，该漏洞源于程序没有正确处理EAPOL数据包。远程攻击者可借助特制的数据包利用该漏洞造成拒绝服务（崩溃），也可能执行任意代码。
solution:Upgrade aircrack-ng aircrack-ng to a higher version than 1.0,0.1,0.2,0.2.1,0.3,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.5,0.6,0.6.1,0.6.2,0.7,0.8,0.9,0.9.1,0.9.2,0.9.3,1.0:beta1,1.0:beta2,1.0:rc1,1.0:rc2,1.0:rc3,1.0:rc4,and avoid the version (,1.0],0.1,0.2,0.2.1,0.3,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.5,0.6,0.6.1,0.6.2,0.7,0.8,0.9,0.9.1,0.9.2,0.9.3,1.0:beta1,1.0:beta2,1.0:rc1,1.0:rc2,1.0:rc3,1.0:rc4; Upgrade gentoo linux to a higher version than *