CVE-2007-2831

Published: May 24, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system crash), possibly obtain kernel memory contents, and possibly execute arbitrary code via a large negative array index value.

Affected (5)

Products: Madwifi: Madwifi

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Madwifi Madwifi	Up to 0.9.3
Madwifi Madwifi	Version 0.9.0
Madwifi Madwifi	Version 0.9.1
Madwifi Madwifi	Version 0.9.2.1
Madwifi Madwifi	Version 0.9.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (32)

http://madwifi.org/ticket/1334

Source: cve@mitre.org

Patch

http://madwifi.org/wiki/Security

Source: cve@mitre.org

Patch

http://osvdb.org/36637

Source: cve@mitre.org

http://secunia.com/advisories/25339

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25622

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25763

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25861

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26083

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200706-04.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:132

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_14_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/470674/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24114

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-479-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1919

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34453

Source: cve@mitre.org

http://madwifi.org/ticket/1334

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://madwifi.org/wiki/Security

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://osvdb.org/36637

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25339

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25622

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25763

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25861

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26083

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200706-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:132

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_14_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/470674/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24114

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-479-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1919

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34453

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.