VULNERABILITY INTELLIGENCE

CVE-2014-9381

CVSS score5 MEDIUM
EPSS probability2.79%
CISA KEVNot currently listed
Published2014-12-19
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation.

Primary references