CVE-2010-1159 [Medium] | Memory Corruption in Aircrack-Ng

CVE-2010-1159 is rated High Exploit Risk (69.9/100): CVSS Medium severity, with high exploitation likelihood (EPSS 7.26%, 94th percentile). 1 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

EDB-ID	Source	Kind	Published	Link
12217	exploit_db	edb	2010-04-14	Exploit-DB ↗

EDB-ID

Source

Kind

Published

Link

12217

exploit_db

edb

2010-04-14

Exploit-DB ↗

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-06-15	26.40%	7.26%	-19.13%
2	2025-06-13	27.76%	26.40%	-1.37%
3	2025-03-30	—	27.76%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-06-15

26.40%

7.26%

-19.13%

2025-06-13

27.76%

26.40%

-1.37%

2025-03-30

—

27.76%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
6.8	2.0	MEDIUM	`AV:N/AC:M/Au:N/C:P/I:P/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:M) Exploitation needs some favorable conditions, but not exceptional ones. Authentication (AU:N) No authentication is required. Confidentiality impact (C:P) Partial confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:P) Partial availability impact.	8.6	6.4	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

6.8

2.0

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:M): Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:P): Partial confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:P): Partial availability impact.

8.6

6.4

[email protected]

OS Trackers for CVE-2010-1159

vendor	priority	summary	link
`debian`	low	CVE-2010-1159 low priority: Debian including 1 source packages (aircrack-ng), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2010-1159
`gentoo`	normal	CVE-2010-1159: 1 GLSA(s) (201310-06), 1 atom(s) (net-wireless/aircrack-ng); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-1159
`ubuntu`	medium	CVE-2010-1159 medium priority: Ubuntu including 1 source packages (aircrack-ng), 12 status rows across 12 suites (dapper, hardy, karmic, lucid, maverick, natty, oneiric, precise, quantal, raring, saucy, upstream): ignored 6, not-affected 3, DNE 2, needs-triage 1.	https://ubuntu.com/security/CVE-2010-1159

Affected software / configurations for CVE-2010-1159

Vendor	Product	Version	Raw CPE
aircrack-ng	aircrack-ng	<= 1.0	cpe:2.3:a:aircrack-ng:aircrack-ng::::::::
aircrack-ng	aircrack-ng	0.1	cpe:2.3:a:aircrack-ng:aircrack-ng:0.1:::::::*
aircrack-ng	aircrack-ng	0.2	cpe:2.3:a:aircrack-ng:aircrack-ng:0.2:::::::*
aircrack-ng	aircrack-ng	0.2.1	cpe:2.3:a:aircrack-ng:aircrack-ng:0.2.1:::::::*
aircrack-ng	aircrack-ng	0.3	cpe:2.3:a:aircrack-ng:aircrack-ng:0.3:::::::*
aircrack-ng	aircrack-ng	0.4	cpe:2.3:a:aircrack-ng:aircrack-ng:0.4:::::::*
aircrack-ng	aircrack-ng	0.4.1	cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.1:::::::*
aircrack-ng	aircrack-ng	0.4.2	cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.2:::::::*
aircrack-ng	aircrack-ng	0.4.3	cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.3:::::::*
aircrack-ng	aircrack-ng	0.4.4	cpe:2.3:a:aircrack-ng:aircrack-ng:0.4.4:::::::*
aircrack-ng	aircrack-ng	0.5	cpe:2.3:a:aircrack-ng:aircrack-ng:0.5:::::::*
aircrack-ng	aircrack-ng	0.6	cpe:2.3:a:aircrack-ng:aircrack-ng:0.6:::::::*
aircrack-ng	aircrack-ng	0.6.1	cpe:2.3:a:aircrack-ng:aircrack-ng:0.6.1:::::::*
aircrack-ng	aircrack-ng	0.6.2	cpe:2.3:a:aircrack-ng:aircrack-ng:0.6.2:::::::*
aircrack-ng	aircrack-ng	0.7	cpe:2.3:a:aircrack-ng:aircrack-ng:0.7:::::::*
aircrack-ng	aircrack-ng	0.8	cpe:2.3:a:aircrack-ng:aircrack-ng:0.8:::::::*
aircrack-ng	aircrack-ng	0.9	cpe:2.3:a:aircrack-ng:aircrack-ng:0.9:::::::*
aircrack-ng	aircrack-ng	0.9.1	cpe:2.3:a:aircrack-ng:aircrack-ng:0.9.1:::::::*
aircrack-ng	aircrack-ng	0.9.2	cpe:2.3:a:aircrack-ng:aircrack-ng:0.9.2:::::::*
aircrack-ng	aircrack-ng	0.9.3	cpe:2.3:a:aircrack-ng:aircrack-ng:0.9.3:::::::*
aircrack-ng	aircrack-ng	1.0	cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:beta1::::::
aircrack-ng	aircrack-ng	1.0	cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:beta2::::::
aircrack-ng	aircrack-ng	1.0	cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc1::::::
aircrack-ng	aircrack-ng	1.0	cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc2::::::
aircrack-ng	aircrack-ng	1.0	cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc3::::::
aircrack-ng	aircrack-ng	1.0	cpe:2.3:a:aircrack-ng:aircrack-ng:1.0:rc4::::::
gentoo	linux	—	cpe:2.3:o:gentoo:linux::::::::

References for CVE-2010-1159

URL	Tags
http://pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py
http://secunia.com/advisories/39150	Vendor Advisory
http://secunia.com/advisories/55053	Vendor Advisory
http://security.gentoo.org/glsa/glsa-201310-06.xml	Vendor Advisory
http://svn.aircrack-ng.org/trunk/ChangeLog

URL

CVE-2010-1159

Public exploit references (Exploit-DB) for CVE-2010-1159

Exploit prediction scoring system (EPSS) score for CVE-2010-1159

Common vulnerability scoring system (CVSS) metrics for CVE-2010-1159

Weakness enumeration for CVE-2010-1159

OS Trackers for CVE-2010-1159

Affected software / configurations for CVE-2010-1159

References for CVE-2010-1159