PatchTheCVEwireless tools vulnerabilities and fixes
Recent CVEs affecting wireless tools, with upgrade or downgrade steps. 2 tracked.
Also searched as: wirelesstools.
wireless tools has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-12-15. Highest priority: CVE-2003-0947 (score 48/100).
- CVE-2003-0948 HIGH 7.2 DOWNGRADE Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
- CVE-2003-0947 HIGH 7.2 DOWNGRADE Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OU
FAQ
How do I fix wireless tools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wireless tools being exploited right now?
None of the tracked wireless tools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wireless tools CVE should I patch first?
CVE-2003-0947 currently ranks highest (48/100): Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OU.