CVE-2014-9381: Ettercap-Project Ettercap

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation.

Affected products

• Ettercap-Project Ettercap: version 0.8.1 only

Published 2014-12-19. Last modified 2026-06-17.