Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Ettercap | ettercap | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 09 Nov 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root. | |
| Title | Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissector | |
| First Time appeared |
Ettercap-project
Ettercap-project ettercap |
|
| Weaknesses | CWE-122 | |
| CPEs | cpe:2.3:a:ettercap-project:ettercap:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Ettercap-project
Ettercap-project ettercap |
|
| References |
|
|
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-11-09T23:28:03.530Z
Reserved: 2026-11-09T22:03:15.478Z
Link: CVE-2026-125401
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-122
Heap-based Buffer Overflow