CVE-2017-20161: A vulnerability classified as problematic has been found in rofl0r MacGeiger

Q: How do I fix CVE-2017-20161?

macgeiger: upgrade to 2017-12-02. Exact commands for each OS are on this page.

Q: Is CVE-2017-20161 being exploited?

CVE-2017-20161 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2017-20161 affect?

CVE-2017-20161 affects macgeiger. Severity is medium (CVSS 4.6). A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is

Q: How urgent is CVE-2017-20161?

Priority 27/100. No elevated risk signals yet.

Routine

MEDIUM 4.6UPGRADE

CVE-2017-20161 is a medium-severity flaw (CVSS 4.6) affecting macgeiger. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	4.6 (Medium)
Attack vector	Adjacent network
Attack complexity	High
Privileges needed	None
User interaction	Required
EPSS exploit chance	0.5% (top 56%)
CISA exploited list	No
Weakness	CWE-74
Published	2023-01-02
Last modified	2026-06-17

Publisher (CNA): VulDB · Vendor: macgeiger project

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-01-02 16:15 UTCPublished CVE record published
2026-06-17 01:15 UTCUpdated Record last modified

macgeiger project macgeiger UPGRADE

Affected: < 2017-12-02

Fixed in: 2017-12-02

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy macgeiger || rpm -q macgeiger || macgeiger --version

2. UPGRADE to 2017-12-02 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade macgeiger

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade macgeiger

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2017-20161?

macgeiger: upgrade to 2017-12-02. Exact commands for each OS are on this page.

Is CVE-2017-20161 being exploited?

CVE-2017-20161 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2017-20161 affect?

CVE-2017-20161 affects macgeiger. Severity is medium (CVSS 4.6). A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is

How urgent is CVE-2017-20161?

Priority 27/100. No elevated risk signals yet.

References

← Back to latest CVEs