CVE-2007-5448 - Vulnerability Details - OpenCVE

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Madwifi	Madwifi

Configuration 1 [-]

cpe:2.3:a:madwifi:madwifi:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://bugs.gentoo.org/show_bug.cgi?id=195705
http://madwifi.org/changeset/2736
http://secunia.com/advisories/27197
http://secunia.com/advisories/27541
http://secunia.com/advisories/28431
http://securityreason.com/securityalert/3225
http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:007
http://www.sec-consult.com/298.html
http://www.securityfocus.com/archive/1/482168/100/0/threaded
http://www.securityfocus.com/bid/26052
http://www.vupen.com/english/advisories/2007/3493
https://exchange.xforce.ibmcloud.com/vulnerabilities/37182

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-10-14T18:00:00

Updated: 2024-08-07T15:31:58.645Z

Reserved: 2007-10-14T00:00:00

Link: CVE-2007-5448

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-10-14T18:17:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-5448

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-12T00:00:00", "descriptions": [{"lang": "en", "value": "Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "26052", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26052"}, {"name": "27197", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27197"}, {"name": "MDVSA-2008:007", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:007"}, {"name": "madwifi-xrates-dos(37182)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37182"}, {"name": "3225", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3225"}, {"name": "20071012 SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/482168/100/0/threaded"}, {"name": "ADV-2007-3493", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3493"}, {"name": "27541", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27541"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://madwifi.org/changeset/2736"}, {"name": "GLSA-200711-09", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=195705"}, {"name": "28431", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28431"}, {"tags": ["x_refsource_MISC"], "url": "http://www.sec-consult.com/298.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2007-5448", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "26052", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26052"}, {"name": "27197", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27197"}, {"name": "MDVSA-2008:007", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:007"}, {"name": "madwifi-xrates-dos(37182)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37182"}, {"name": "3225", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3225"}, {"name": "20071012 SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/482168/100/0/threaded"}, {"name": "ADV-2007-3493", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3493"}, {"name": "27541", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27541"}, {"name": "http://madwifi.org/changeset/2736", "refsource": "CONFIRM", "url": "http://madwifi.org/changeset/2736"}, {"name": "GLSA-200711-09", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml"}, {"name": "http://bugs.gentoo.org/show_bug.cgi?id=195705", "refsource": "CONFIRM", "url": "http://bugs.gentoo.org/show_bug.cgi?id=195705"}, {"name": "28431", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28431"}, {"name": "http://www.sec-consult.com/298.html", "refsource": "MISC", "url": "http://www.sec-consult.com/298.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:31:58.645Z"}, "title": "CVE Program Container", "references": [{"name": "26052", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26052"}, {"name": "27197", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27197"}, {"name": "MDVSA-2008:007", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:007"}, {"name": "madwifi-xrates-dos(37182)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37182"}, {"name": "3225", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3225"}, {"name": "20071012 SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/482168/100/0/threaded"}, {"name": "ADV-2007-3493", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3493"}, {"name": "27541", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27541"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://madwifi.org/changeset/2736"}, {"name": "GLSA-200711-09", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=195705"}, {"name": "28431", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28431"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.sec-consult.com/298.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5448", "datePublished": "2007-10-14T18:00:00", "dateReserved": "2007-10-14T00:00:00", "dateUpdated": "2024-08-07T15:31:58.645Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:madwifi:madwifi:*:*:*:*:*:*:*:*", "matchCriteriaId": "817F054B-BF7F-4B2E-B2BF-E58D67A3B101", "versionEndIncluding": "0.9.3.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c."}, {"lang": "es", "value": "Madwifi 0.9.3.2 y versiones anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio (p\u00e1nico) mediante una trama de baliza con una valor de longitud largo en el elemento extended supported rates (xrates). que dispara una error de aserci\u00f3n, relativo a net80211/ieee80211_scan_ap.c y net80211/ieee80211_scan_sta.c."}], "id": "CVE-2007-5448", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-10-14T18:17:00.000", "references": [{"source": "[email protected]", "url": "http://bugs.gentoo.org/show_bug.cgi?id=195705"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://madwifi.org/changeset/2736"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/27197"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/27541"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/28431"}, {"source": "[email protected]", "url": "http://securityreason.com/securityalert/3225"}, {"source": "[email protected]", "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml"}, {"source": "[email protected]", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:007"}, {"source": "[email protected]", "url": "http://www.sec-consult.com/298.html"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/archive/1/482168/100/0/threaded"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/26052"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2007/3493"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37182"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.gentoo.org/show_bug.cgi?id=195705"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://madwifi.org/changeset/2736"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/27197"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/27541"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/28431"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3225"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-09.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:007"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.sec-consult.com/298.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/482168/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/26052"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/3493"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37182"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Primary"}]}