10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.139 Low
EPSS
Percentile
95.6%
Kismet is an 802.11 Layer 2 wireless network detector, sniffer, and intrusion detection system.
Kismet is vulnerable to a heap overflow when handling pcap captures and to an integer underflow in the CDP protocol dissector.
With a specially crafted packet an attacker could cause Kismet to execute arbitrary code with the rights of the user running the program.
There is no known workaround at this time.
All Kismet users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/kismet-2005.08.1"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | net-wireless/kismet | < 2005.08.1 | UNKNOWN |