Arch Linux Security Advisory ASA-201709-16 ========================================== Severity: High Date : 2017-09-18 CVE-ID : CVE-2017-6430 CVE-2017-8366 Package : ettercap Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-212 Summary ======= The package ettercap before version 0.8.2-5 is vulnerable to multiple issues including arbitrary code execution and denial of service. Resolution ========== Upgrade to 0.8.2-5. # pacman -Syu "ettercap>=0.8.2-5" The problems have been fixed upstream but no release is available yet. Workaround ========== None. Description =========== - CVE-2017-6430 (denial of service) The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows attackers to cause a denial of service (out-of-bounds read) via a crafted filter. - CVE-2017-8366 (arbitrary code execution) The strescape function in ec_strings.c in Ettercap 0.8.2 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code via a crafted filter that is mishandled by etterfilter. Impact ====== An attacker is able to crash the application or execute arbitrary code by tricking the user to open a specially crafted filter. References ========== https://github.com/Ettercap/ettercap/issues/782 https://github.com/Ettercap/ettercap/commit/7f50c57b2101fe75592c8dc9960883bb... https://github.com/Ettercap/ettercap/issues/792 https://github.com/Ettercap/ettercap/issues/789 https://github.com/Ettercap/ettercap/commit/1083d604930ebb9f350126b83802ecd2... https://security.archlinux.org/CVE-2017-6430 https://security.archlinux.org/CVE-2017-8366