ETTERCAP · CVE-2026-125402 · Package
NO FIX YET · SEE WHAT TO DO
Ettercap, a network man-in-the-middle tool, has a heap out-of-bounds read in its SSL interception code that trusts an unchecked 16-bit SNI length field. A network-adjacent attacker can send a crafted TLS ClientHello during SSL interception to leak up to 64 KB of heap memory or crash Ettercap.
first public Nov 6, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running Ettercap with SSL interception enabled on a network an attacker can reach, such as security testing or lab networks. Systems that do not run Ettercap or do not use SSL interception are unlikely to be affected. The sources do not say which Ettercap builds are patched beyond the upstream commit.
Not affected if built-without-openssl-1.1.1, ettercap-not-installed, ssl-interception-disabled
Who cares ettercap, network-security, openssl, ssl-interception
ettercap --version. 0.8.4.1 and earlier are affected, and there is no patched release yet1.1.1 or later support (HAVE_OPENSSL_1_1_1) and you run SSL MITM/interceptionEttercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src/ec_sslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted TLS ClientHello messages during SSL interception to leak up to 64 KB of heap memory upstream or crash Ettercap.
This page as .md · .json · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
0.8.4.1, is affectedNVD data is provided by NIST and is public domain. Posts quoted belong to their authors.