Threats tagged 'ghsa-hf6q-wchc-457m'

Ettercap versions through 0.8.4.1 have a use-after-free vulnerability in the func_pcre() function within src/ec_filter.c. This flaw involves reading the PCRE2 ovector after the associated match data has been freed. An attacker on the same network segment can exploit this by sending packets that match a loaded pcre_regex() substitution filter, potentially leading to memory corruption and remote code execution with root privileges.