CVE-2017-8366 The strescape function in ec_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impa...
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The strescape function in ec_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ettercap(Debian:12) | < 1:0.8.2-5 | 1:0.8.2-5 |
| debian/ettercap(Debian:13) | < 1:0.8.2-5 | 1:0.8.2-5 |
| ettercap project ettercap | = 0.8.2 | No fix listed |
References
- Debian Security Tracker CVE-2017-8366 vendor-advisory
- DSA-3874 vendor-advisory
- blogs.gentoo.org exploit third-party-advisory
- bugs.debian.org issue-tracking