Out-of-Bounds Read Vulnerability in Ettercap's Etterfilter Utility

CVE-2017-6430

What is CVE-2017-6430?

The compile_tree function in ef_compiler.c within the Etterfilter utility of Ettercap versions 0.8.2 and earlier is susceptible to a vulnerability that could be exploited by remote attackers. By crafting a specific filter, an attacker can trigger an out-of-bounds read condition, potentially leading to a denial of service. This vulnerability underscores the importance of ensuring that services using Ettercap are monitored and updated to mitigate potential threats.

References