CVE-2017-6430

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and...

5.5 MediumFix available

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.97%Down 0.3 points since Apr 14, 2021

What each source reports

NVD Score used 5.5

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: CVE-2017-6430
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: CVE-2017-6430
Updated: 2026-11-02

EUVDEUVD-2017-15487 No score

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: EUVD-2017-15487
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j8fm-f42x-52jx 5.5

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and...

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: GHSA-j8fm-f42x-52jx
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSV 5.5

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: CVE-2017-6430
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2017-6430 5.5

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: DEBIAN-CVE-2017-6430
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2017-6430 5.5

The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.

Record: UBUNTU-CVE-2017-6430
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2017-0130 No score

Updated ettercap packages fix security vulnerability

Etterfilter utility of Ettercap have an out-of-bounds read denial-of-service vulnerability when parsing a crafted file. This occurs in the compile_tree function of the ef_compiler.c source file when processing corrupted filters (CVE-2017-6430).

Record: MGASA-2017-0130
Updated: 2026-11-02

Affected products

ettercap-project ettercap

Affected packages

Affected packages
Package	Affected	Fixed
`ettercap` Debian:12	before 1:0.8.2-4	1:0.8.2-4
`ettercap` Debian:13	before 1:0.8.2-4	1:0.8.2-4
`ettercap` Debian:8	before 1:0.8.1-3+deb8u1, plus listed versions 1:0.8.1-3	1:0.8.1-3+deb8u1
`ettercap` Mageia:5	before 0.8.2-1.mga5	0.8.2-1.mga5
`ettercap` Ubuntu:14.04:LTS	before 1:0.8.0-11ubuntu0.3, plus listed versions 1:0.7.6-11:0.8.0-61:0.8.0-111:0.8.0-11ubuntu0.1	1:0.8.0-11ubuntu0.3
`ettercap` Ubuntu:16.04:LTS	before 1:0.8.2-2ubuntu1.16.04.1, plus listed versions 1:0.8.2-21:0.8.2-2build1	1:0.8.2-2ubuntu1.16.04.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-6430 is a medium vulnerability (CVSS 5.5) in Ettercap-project Ettercap, published March 15, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in ettercap 1:0.8.2-4.

References

Show 8 moreShow less