CVE-2026-125403— Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts

Quick assessment

Affected

Ettercap ettercap

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ettercap 0.8.4.1 及更早版本在的函数中存在越界读取和下溢漏洞。该漏洞源于在移除 Strict-Transport-Security（严格传输安全）标头时，使用了过期的长度值且未检查函数的返回值。若恶意 HTTPS 服务器的响应经过 Ettercap 的 SSL 拦截，即可触发 Ettercap 进程中的越界读取和内存破坏。由于 Ettercap 通常以 root 权限运行，此类漏洞可能导致严重的安全风险。

CVSS 8.1 · High Updated Nov 10, 2026

Possible ATT&CK Techniques 2 AI

T1068.001 T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts

Source: CVE Program / CVE List V5

Vulnerability Description

Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts() in src/ec_sslwrap.c, caused by a stale length and an unchecked memmem() result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap's SSL interception can trigger out-of-bounds reads and memory corruption in the Ettercap process, which normally runs as root.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Ettercap	ettercap	0 ~ 0.8.4.1	-

II. Public POCs for CVE-2026-125403

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125403

请登录查看更多情报信息。

Other References for CVE-2026-125403 (5)

https://github.com/Ettercap/ettercap/blob/v0.8.4.1/src/ec_sslwrap.c#L1294-L1322 technical-description
https://github.com/Ettercap/ettercap/commit/1d8badb713579419a29a494bb463a1af59707e98 patch
https://github.com/Ettercap/ettercap/pull/1330 issue-tracking patch
https://github.com/Ettercap/ettercap/security/advisories/GHSA-hq2w-pg4m-6w63 vendor-advisory
https://www.vulncheck.com/advisories/ettercap-through-0.8.4.1-out-of-bounds-read-via-sslw-remove-sts third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-125403

Same Patch Batch · Ettercap · 2026-11-09 · 7 CVEs total

CVE-2026-125406	8.8 HIGH	Ettercap through 0.8.4.1 Stack Buffer Underwrite via Telnet Dissector Backspace Handling
CVE-2026-125400	8.8 HIGH	Ettercap through 0.8.4.1 Use-After-Free via PCRE2 Filter Substitution
CVE-2026-125401	8.1 HIGH	Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissector
CVE-2026-125405	8.1 HIGH	Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsing
CVE-2026-125402	8.1 HIGH	Ettercap through 0.8.4.1 Heap Out-of-Bounds Read via TLS SNI Parsing
CVE-2026-125404	7.5 HIGH	Ettercap through 0.8.4.1 Stack Buffer Overflow via WPA CCMP Decryption

IV. Related Vulnerabilities

Same product: ettercap

Same vendor: Ettercap

Same weakness: CWE-125