ETTERCAP · CVE-2026-129432 · Other
NO FIX YET · SEE WHAT TO DO
Ettercap through 0.8.5.1 has a heap out-of-bounds read in its MOUNT RPC dissector, where credential and directory lengths are checked separately instead of against the packet end. A network-adjacent attacker sending a crafted MOUNT MNT call can leak up to 100 bytes of heap memory to the console and logs.
first public Nov 14, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams running Ettercap (through 0.8.5.1) on a network segment shared with untrusted hosts, mostly for sniffing or security testing. A crafted NFS MOUNT call makes the dissector read up to 100 bytes past the packet buffer and print it to the console and logs. This is an information leak with adjacent-network access needed, so hosts without Ettercap, or where it is not run on live traffic, can skip it.
Not affected if ettercap-not-installed, no-live-capture, version-above-0.8.5.1
Who cares ettercap, linux, network-security, self-hosted
0.8.5.1 is affected0.8.5.1Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_mountd() in src/dissectors/ec_mountd.c that validates RPC credential and directory lengths independently rather than against the packet end. Network-adjacent attackers can send a crafted MOUNT MNT call to read up to 100 bytes past the heap buffer, leaking memory to the console and logs.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.