Published: 15/03/2017 Updated: 26/02/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and previous versions allows remote malicious users to cause a denial of service (out-of-bounds read) via a crafted filter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ettercap-project ettercap

Debian Bug report logs - #861604 ettercap: CVE-2017-8366 Package: src:ettercap; Maintainer for src:ettercap is Barak A Pearlmutter <bap@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 1 May 2017 11:21:05 UTC Severity: important Tags: security, upstream Found in version ettercap/1:08 ...

Debian Bug report logs - #857035 ettercap: CVE-2017-6430: Out-of-bounds read in etterfilter utility Package: src:ettercap; Maintainer for src:ettercap is Barak A Pearlmutter <bap@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 7 Mar 2017 12:15:01 UTC Severity: important Tags: patch, se ...

Agostino Sarubbo and AromalUllas discovered that ettercap, a network security tool for traffic interception, contains vulnerabilities that allowed an attacker able to provide maliciously crafted filters to cause a denial-of-service via application crash For the stable distribution (jessie), these problems have been fixed in version 1:081-3+deb8u ...

The compile_tree function in ef_compilerc in the Etterfilter utility in Ettercap 082 and earlier allows attackers to cause a denial of service (out-of-bounds read) via a crafted filter ...

CWE-125 https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506 https://github.com/Ettercap/ettercap/issues/782 http://www.securityfocus.com/bid/96582 http://www.securitytracker.com/id/1038057 http://www.debian.org/security/2017/dsa-3874 http://www.securityfocus.com/archive/1/540223/100/0/threaded https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861604 https://www.debian.org/security/./dsa-3874

CVE-2017-6430

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect