CVE-2014-8324

high

Published 2017-10-17 · Modified 2026-05-13

CVSS v3

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2

5.0

VIR risk

7.5

Description

network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.

Predictions

Exploit likelihood

83%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://github.com/aircrack-ng/aircrack-ng/commit/88702a3ce4c28a973bf69023cd0312f412f6193e

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://bugzilla.redhat.com/show_bug.cgi?id=1159812

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2014-8324

OS impact

OS	Version	Status	Fixed in
debian	trixie	fixed	`1:1.2-0~beta3-2`
debian	bookworm	fixed	`1:1.2-0~beta3-2`
debian	forky	fixed	`1:1.2-0~beta3-2`
debian	bullseye	fixed	`1:1.2-0~beta3-2`
debian	sid	fixed	`1:1.2-0~beta3-2`

Application impact

Vendor	Product	Versions	Fixed
aircrack-ng	aircrack-ng	`{"endIncluding":"1.2"}`

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.