CVE-2026-129432

EUVD-2026-125910
Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_mountd() in src/dissectors/ec_mountd.c that validates RPC credential and directory lengths independently rather than against the packet end. Network-adjacent attackers can send a crafted MOUNT MNT call to read up to 100 bytes past the heap buffer, leaking memory to the console and logs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
ettercap-projectettercap
𝑥
≤ 0.8.5.1
CNA
Common Weakness Enumeration
References
https://github.com/Ettercap/ettercap
https://github.com/Ettercap/ettercap/blob/v0.8.5.1/src/dissectors/ec_mountd.c#L88-L103
https://github.com/Ettercap/ettercap/pull/1341
https://www.vulncheck.com/advisories/ettercap-through-0.8.5.1-heap-out-of-bounds-read-in-nfs-mountd-dissector