Threats tagged 'ghsa-5p5x-8wq5-mrjm'

Ettercap versions through 0.8.4.1 have an integer underflow vulnerability in the ccmp_decrypt() function, which improperly subtracts the 8-byte CCMP trailer without verifying the minimum length. This flaw allows attackers on a network with the WPA key loaded to send a crafted short CCMP frame that overflows a stack buffer in the Ettercap process, which typically runs with root privileges.