CVE-2026-125402

EUVD-2026-120565
Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src/ec_sslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted TLS ClientHello messages during SSL interception to leak up to 64 KB of heap memory upstream or crash Ettercap.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
8.1 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16.57%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
ettercap-projectettercap
𝑥
≤ 0.8.4.1
CNA
Debian logo
Debian Releases
Debian Product
Codename
ettercap
bookworm
vulnerable
sid
vulnerable
trixie
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ettercap
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
stonking
needs-triage
trusty
dne
xenial
needs-triage
Common Weakness Enumeration
References
https://github.com/Ettercap/ettercap/blob/v0.8.4.1/src/ec_sslwrap.c#L589-L604
https://github.com/Ettercap/ettercap/commit/1d8badb713579419a29a494bb463a1af59707e98
https://github.com/Ettercap/ettercap/pull/1330
https://github.com/Ettercap/ettercap/security/advisories/GHSA-v48w-7cvh-c7f4
https://www.vulncheck.com/advisories/ettercap-through-0.8.4.1-heap-out-of-bounds-read-via-tls-sni-parsing