Madwifi

madwifi

10 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5448 1Madwifi 1Madwifi Apr 23, 2026 Oct 14, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, r...Show more Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.Show less
CVE-2007-2831 1Madwifi 1Madwifi Apr 23, 2026 May 24, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system...Show more Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system crash), possibly obtain kernel memory contents, and possibly execute arbitrary code via a large negative array index value.Show less
CVE-2007-2830 1Madwifi 1Madwifi Apr 23, 2026 May 24, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via crafted beacon interval information when scanning for access points, which trig...Show more The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error.Show less
CVE-2007-2829 1Madwifi 1Madwifi Apr 23, 2026 May 24, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system hang) via a crafted length field in nested 802.3 Ethernet frames in Fast Frame...Show more The 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system hang) via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference.Show less
CVE-2006-7180 1Madwifi 1Madwifi Apr 23, 2026 Mar 30, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information (related to network structure), and possibly cause a...Show more ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information (related to network structure), and possibly cause a denial of service (disrupted authentication) and conduct spoofing attacks.Show less
CVE-2006-7179 1Madwifi 1Madwifi Apr 23, 2026 Mar 30, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (CSA IEs), which allows remote attackers to cause a denial of service (loss of communication) via a Cha...Show more ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (CSA IEs), which allows remote attackers to cause a denial of service (loss of communication) via a Channel Switch Count less than or equal to one, triggering a channel change.Show less
CVE-2006-7178 1Madwifi 1Madwifi Apr 23, 2026 Mar 30, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame.
CVE-2006-7177 1Madwifi 1Madwifi Apr 23, 2026 Mar 30, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified vectors that lead to a kernel panic in the ieee80211_input function, related to "packets coming from...Show more MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified vectors that lead to a kernel panic in the ieee80211_input function, related to "packets coming from a 'malicious' WinXP system."Show less
CVE-2006-6332 1Madwifi 1Madwifi Apr 23, 2026 Dec 10, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.
CVE-2005-4835 1Madwifi 1Madwifi Apr 16, 2026 Dec 31, 2005 N/A· v4 N/A· v3 7.1 HIGH· v2 The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a connected system to a lo...Show more The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a connected system to a location with low signal strength, and possibly other vectors related to a race condition between interface enabling and packet transmission.Show less