CVE-2014-8324

network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.

• CWE-20

• http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.htmlIssue Tracking, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143606.htmlThird Party Advisory
• http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.htmlPatch, Third Party Advisory, VDB Entry
• http://security.gentoo.org/glsa/glsa-201411-08.xmlThird Party Advisory
• http://www.securityfocus.com/archive/1/533869/100/0/threaded
• https://bugzilla.redhat.com/show_bug.cgi?id=1159812Issue Tracking, Patch, Third Party Advisory
• https://github.com/aircrack-ng/aircrack-ng/commit/88702a3ce4c28a973bf69023cd0312f412f6193ePatch, Third Party Advisory
• http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.htmlIssue Tracking, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143606.htmlThird Party Advisory
• http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.htmlPatch, Third Party Advisory, VDB Entry
• http://security.gentoo.org/glsa/glsa-201411-08.xmlThird Party Advisory
• http://www.securityfocus.com/archive/1/533869/100/0/threaded
• https://bugzilla.redhat.com/show_bug.cgi?id=1159812Issue Tracking, Patch, Third Party Advisory
• https://github.com/aircrack-ng/aircrack-ng/commit/88702a3ce4c28a973bf69023cd0312f412f6193ePatch, Third Party Advisory

Published

Oct 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8318Cross-site scripting (XSS) vulnerability in the Webform modu…
• CVE-2014-8319Cross-site scripting (XSS) vulnerability in the easy_social_…
• CVE-2014-8320Cross-site scripting (XSS) vulnerability in the Custom Searc…
• CVE-2014-8321Stack-based buffer overflow in the gps_tracker function in a…7.8
• CVE-2014-8322Stack-based buffer overflow in the tcp_test function in aire…9.8
• CVE-2014-8323buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote at…
• CVE-2014-8325The Calendar Base (cal) extension before 1.5.9 and 1.6.x bef…
• CVE-2014-8326Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2014-8327The fal_sftp extension before 0.2.6 for TYPO3 uses weak perm…
• CVE-2014-8328The default configuration in the Dynamic Content Elements (d…5.3
• CVE-2014-8329Schrack Technik microControl with firmware before 1.7.0 (937…
• CVE-2014-8330Cross-site scripting (XSS) vulnerability in EspoCRM allows r…