CVE-2017-6430

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3874
http://www.securityfocus.com/archive/1/540223/100/0/threaded
http://www.securityfocus.com/bid/96582Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038057
https://github.com/Ettercap/ettercap/issues/782Exploit, Third Party Advisory
https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506Patch, Third Party Advisory
http://www.debian.org/security/2017/dsa-3874
http://www.securityfocus.com/archive/1/540223/100/0/threaded
http://www.securityfocus.com/bid/96582Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038057
https://github.com/Ettercap/ettercap/issues/782Exploit, Third Party Advisory
https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506Patch, Third Party Advisory

Timeline

Published: Mar 15, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-64328.1An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port CVE-2017-64355.0The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corrupt CVE-2017-64365.0The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocat CVE-2017-64375.0The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read)CVE-2017-64387.3Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a de CVE-2017-64395.0Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a den CVE-2017-64405.0The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocatio CVE-2017-64417.5The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and CVE-2017-64436.1Cross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to inject arbitrary web script or HTML via th CVE-2017-64447.5The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whic CVE-2017-64458.1The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections no CVE-2017-64466.1XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters.