Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-126-1 | ettercap security update |
EUVD |
EUVD-2014-9203 | Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T13:40:25.164Z
Reserved: 2014-12-11T00:00:00
Link: CVE-2014-9381
No data.
Status : Deferred
Published: 2014-12-19T15:59:31.567
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-9381
No data.
OpenCVE Enrichment
No data.
Debian DLA
EUVD