Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-9376

Опубликовано: 19 дек. 2014
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5

Описание

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and possibly execute arbitrary code via a small (1) size variable value in the dissector_dhcp function in dissectors/ec_dhcp.c, (2) length value to the dissector_gg function in dissectors/ec_gg.c, or (3) string length to the get_decode_len function in ec_utils.c or a request without a (4) username or (5) password to the dissector_TN3270 function in dissectors/ec_TN3270.c.

РелизСтатусПримечание
artful

not-affected

1:0.8.1-3
bionic

not-affected

1:0.8.1-3
cosmic

not-affected

1:0.8.1-3
devel

not-affected

1:0.8.1-3
disco

not-affected

1:0.8.1-3
esm-apps/bionic

not-affected

1:0.8.1-3
esm-apps/xenial

not-affected

1:0.8.1-3
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
lucid

ignored

end of life
precise

ignored

end of life

Показывать по

EPSS

Процентиль: 86%
0.03098
Низкий

7.5 High

CVSS2

Связанные уязвимости

nvd
около 11 лет назад

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and possibly execute arbitrary code via a small (1) size variable value in the dissector_dhcp function in dissectors/ec_dhcp.c, (2) length value to the dissector_gg function in dissectors/ec_gg.c, or (3) string length to the get_decode_len function in ec_utils.c or a request without a (4) username or (5) password to the dissector_TN3270 function in dissectors/ec_TN3270.c.

debian
около 11 лет назад

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a ...

github
больше 3 лет назад

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and possibly execute arbitrary code via a small (1) size variable value in the dissector_dhcp function in dissectors/ec_dhcp.c, (2) length value to the dissector_gg function in dissectors/ec_gg.c, or (3) string length to the get_decode_len function in ec_utils.c or a request without a (4) username or (5) password to the dissector_TN3270 function in dissectors/ec_TN3270.c.

EPSS

Процентиль: 86%
0.03098
Низкий

7.5 High

CVSS2