Madwifi
8 CVEs tracked since 2007. Since Mar 2007, none of them reached CISA KEV.
Madwifi CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2007-03 | 5 | 0 |
| 2007-04 | null or fewer | |
| 2007-05 | 3 | 0 |
Products
The products that kept showing up in Madwifi's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 10 most recently published vulnerabilities affecting Madwifi.
- CVE-2007-5448Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which trigger...4.3
- CVE-2007-2831Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a den...10.0
- CVE-2007-2830The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via crafted beacon interval information when scanning for ac...5.0
- CVE-2007-2829The 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system hang) via a crafted length field in nested 802.3 Ethern...5.0
- CVE-2006-7180ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information (related to network structure)...6.8
- CVE-2006-7177MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified vectors that lead to a kernel panic in the ieee80211_input function, related t...7.8
- CVE-2006-7179ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (CSA IEs), which allows remote attackers to cause a denial of service (loss of c...7.8
- CVE-2006-7178MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame.7.8
- CVE-2005-4835The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a c...7.1
- CVE-2006-6332Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwsca...7.5
The record
- Peak rank
- #17 in Mar 2007
- Busiest month shown
- Mar 2007, 5 CVEs
- Months with a KEV entry
- 0 since Mar 2007
- Monthly snapshots
- 2 since 2007