Lucene search
MitreCVE-2014-9380HistoryDec 19, 2014 - 3:59 p.m.
CVE-2014-9380
2014-12-1915:59:30
CWE-119
mitre
web.nvd.nist.gov
29
cve-2014-9380
ettercap
remote attackers
denial of service
out-of-bounds read
cvs_login
security vulnerability
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.024
Percentile
89.8%
The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a packet containing only a CVS_LOGIN signature.
Affected configurations
Node
ettercap-projectettercapMatch0.8.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ettercap-project | ettercap | 0.8.1 | cpe:2.3:a:ettercap-project:ettercap:0.8.1:*:*:*:*:*:*:* |
Related
prion
prion
Out-of-bounds
2014-12-19 15:59:00
nvd
nvd
CVE-2014-9380
2014-12-19 15:59:30
debiancve
debiancve
CVE-2014-9380
2014-12-19 15:59:30
cvelist
cvelist
CVE-2014-9380
2014-12-19 15:00:00
ubuntucve
ubuntucve
CVE-2014-9380
2014-12-19 00:00:00
debian
debian
[SECURITY] [DLA 126-1] ettercap security update
2014-12-29 21:26:51
openvas
openvas
Debian: Security Advisory (DLA-126-1)
2023-03-08 00:00:00
Fedora Update for ettercap FEDORA-2014-17090
2015-01-05 00:00:00
Fedora Update for ettercap FEDORA-2014-17210
2015-01-05 00:00:00
nessus
nessus
Debian DLA-126-1 : ettercap security update
2015-03-26 00:00:00
Fedora 21 : ettercap-0.8.1-2.fc21 (2014-17090)
2015-01-05 00:00:00
Fedora 22 : ettercap-0.8.2-1.fc22 (2015-4009)
2015-03-23 00:00:00
osv
osv
ettercap - security update
2014-12-29 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: ettercap-0.8.1-2.fc19
2015-01-03 19:08:05
[SECURITY] Fedora 21 Update: ettercap-0.8.1-2.fc21
2015-01-03 19:11:42
[SECURITY] Fedora 20 Update: ettercap-0.8.1-2.fc20
2015-01-03 19:07:29
securityvulns
securityvulns
"Ettercap 8.0 - 8.1" multiple vulnerabilities
2014-12-22 00:00:00
ettercap multiple security vulnerabilities
2014-12-22 00:00:00
gentoo
gentoo
Ettercap: Multiple vulnerabilities
2015-05-13 00:00:00
mageia
mageia
Updated ettercap packages fix security vulnerabilities
2015-01-07 19:32:10
archlinux
archlinux
ettercap-gtk: multiple issues
2015-03-17 00:00:00
ettercap: multiple issues
2015-03-17 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.024
Percentile
89.8%
Related for CVE-2014-9380