CVE-2014-8322

Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value.

• CWE-787

• http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.htmlProduct, Release Notes, Third Party Advisory
• http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/35018Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98459Third Party Advisory, VDB Entry
• https://github.com/aircrack-ng/aircrack-ng/commit/091b153f294b9b695b0b2831e65936438b550d7bPatch, Third Party Advisory
• https://github.com/aircrack-ng/aircrack-ng/pull/14Patch, Third Party Advisory
• http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.htmlProduct, Release Notes, Third Party Advisory
• http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/35018Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98459Third Party Advisory, VDB Entry
• https://github.com/aircrack-ng/aircrack-ng/commit/091b153f294b9b695b0b2831e65936438b550d7bPatch, Third Party Advisory
• https://github.com/aircrack-ng/aircrack-ng/pull/14Patch, Third Party Advisory

Published

Jan 31, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8316XML External Entity (XXE) vulnerability in polestar_xml.jsp …
• CVE-2014-8317Cross-site scripting (XSS) vulnerability in the Webform Vali…
• CVE-2014-8318Cross-site scripting (XSS) vulnerability in the Webform modu…
• CVE-2014-8319Cross-site scripting (XSS) vulnerability in the easy_social_…
• CVE-2014-8320Cross-site scripting (XSS) vulnerability in the Custom Searc…
• CVE-2014-8321Stack-based buffer overflow in the gps_tracker function in a…7.8
• CVE-2014-8323buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote at…
• CVE-2014-8324network.c in Aircrack-ng before 1.2 Beta 3 allows remote att…
• CVE-2014-8325The Calendar Base (cal) extension before 1.5.9 and 1.6.x bef…
• CVE-2014-8326Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2014-8327The fal_sftp extension before 0.2.6 for TYPO3 uses weak perm…
• CVE-2014-8328The default configuration in the Dynamic Content Elements (d…5.3