Description
The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error.
References
- USN-479-1 vendor-advisory
- GLSA-200706-04 vendor-advisory
- 25339 third-party-advisory
- 24114 vdb-entry
- 26083 third-party-advisory
- 25622 third-party-advisory
- SUSE-SR:2007:014 vendor-advisory
- 36636 vdb-entry
- madwifi-athbeaconconfig-dos(34451) vdb-entry
- 25763 third-party-advisory
- http://madwifi.org/ticket/1270
- MDKSA-2007:132 vendor-advisory
- http://madwifi.org/wiki/Security
- 25861 third-party-advisory
- ADV-2007-1919 vdb-entry
- 20070606 FLEA-2007-0021-2: madwifi mailing-list