Description
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 2
- DSA-788-1 kismet - several Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-1-1 kismet - various Debian Security (DSA / DLA) · Mar 9, 2026
References
- GLSA-200508-10 vendor-advisory
- DSA-788 vendor-advisory
- SUSE-SR:2005:020 vendor-advisory
- 16634 third-party-advisory
- 16477 third-party-advisory
- ADV-2005-1422 vdb-entry
- 16447 third-party-advisory
- http://www.kismetwireless.net/CHANGELOG
- http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt
- 14430 vdb-entry