CVE-2009-0052 Denial of service in n/a
Authenticated remote attackers can cause denial of service or execute arbitrary code via a truncated management frame in Atheros-based Wi-Fi access points.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-0052?
CVE-2009-0052 is a medium-severity denial of service vulnerability in n/a, published on 12 Nov 2009. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (device reboot or hang) and possibly execute arbitrary code via a truncated reserved management frame.
Which versions are affected by CVE-2009-0052?
It affects 2 products.
Products include Atheros Ar9160-Bc1a Chipset, Netgear Wndap330 Firmware.
How do I fix CVE-2009-0052?
No fix has been published for CVE-2009-0052 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2009-0052 being exploited?
There is no known exploitation of CVE-2009-0052 in the wild and no public exploit code.
Sources
Also known as GHSA-6jvr-qgrq-69g3.