CVE-2014-9381

Опубликовано: 19 дек. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation.

Ссылки

http://www.securityfocus.com/archive/1/534248/100/0/threaded
http://www.securityfocus.com/bid/71693
Third Party Advisory
VDB Entry
https://github.com/Ettercap/ettercap/pull/609
Issue Tracking
Patch
https://security.gentoo.org/glsa/201505-01
https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402/
Broken Link
http://www.securityfocus.com/archive/1/534248/100/0/threaded
http://www.securityfocus.com/bid/71693
Third Party Advisory
VDB Entry
https://github.com/Ettercap/ettercap/pull/609
Issue Tracking
Patch
https://security.gentoo.org/glsa/201505-01
https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402/
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ettercap-project:ettercap:0.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00965

Низкий

5 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2014-9381

ubuntu

около 11 лет назад

CVE-2014-9381

debian

около 11 лет назад

Integer signedness error in the dissector_cvs function in dissectors/e ...

GHSA-48qw-96c7-m2c9

github

больше 3 лет назад

EPSS

Процентиль: 76%

0.00965

Низкий

5 Medium

CVSS2

Дефекты

CWE-189