Vulnerability in Ettercap-Project Ettercap

CVE-2014-9381

Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation.

EPSS: 0.028 (84.9th percentile) — read the EPSS interpretation.

Affected products

Ettercap-project Ettercap — versions 0.8.1
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
cve@mitre.org (x_refsource_MISC, Broken Link)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking)