[Secure-testing-team] Bug#767979: aircrack-ng: CVE-2014-8321 CVE-2014-8322 CVE-2014-8323 CVE-2014-8324

[Salvatore Bonaccorso]

Package: aircrack-ng
Version: 1:1.2-0~beta3-1
Severity: grave
Tags: security upstream

Hi,

the following vulnerabilities were published for aircrack-ng.

CVE-2014-8321[0]:
GPS stack overflow

CVE-2014-8322[1]:
tcp_test stack overflow

CVE-2014-8323[2]:
buddy-ng missing checkin data format

CVE-2014-8324[3]:
net_get missing check for invalid values

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-8321
[1] https://security-tracker.debian.org/tracker/CVE-2014-8322
[2] https://security-tracker.debian.org/tracker/CVE-2014-8323
[3] https://security-tracker.debian.org/tracker/CVE-2014-8324
[4] http://seclists.org/bugtraq/2014/Nov/1

Regards,
Salvatore