CVE-2026-125401

Description

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/Ettercap/ettercap/security/advisories/GHSA-vrjv-f8gv-2h35 ↗
• https://github.com/Ettercap/ettercap/commit/1d8badb713579419a29a494bb463a1af59707e98 ↗
• https://github.com/Ettercap/ettercap/pull/1330 ↗
• https://github.com/Ettercap/ettercap/blob/v0.8.4.1/src/dissectors/ec_gg.c#L599 ↗
• https://www.vulncheck.com/advisories/ettercap-through-0.8.4.1-heap-buffer-overflow-via-gadu-gadu-dissector ↗