The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Ettercap GitHub issue :

Etterfilter results in an invalid read of 8 bytes when parsing a crafted file.

Agostino Sarubbo and AromalUllas discovered that ettercap, a network security tool for traffic interception, contains vulnerabilities that allowed an attacker able to provide maliciously crafted filters to cause a denial-of-service via application crash.

Fix for CVE-2017-6430

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
126487	FreeBSD : ettercap -- out-of-bound read vulnerability (b79ec16b-9da7-11e9-a0ea-a92fe7db4867)	Nessus	FreeBSD Local Security Checks	medium
100725	Debian DSA-3874-1 : ettercap - security update	Nessus	Debian Local Security Checks	critical
97759	Fedora 24 : ettercap (2017-2258cfb450)	Nessus	Fedora Local Security Checks	medium
97746	Fedora 25 : ettercap (2017-06365bdcfd)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2017-6430

medium

Tenable Plugins

medium

critical

medium

medium