EUVD-2026-120566

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125403

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125403: ettercap: Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts() in…

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125402

Ettercap versions up to and including 0.8.4.1 are vulnerable to a heap out-of-bounds read in the sslw_get_clienthello_sni() function within src/ec_sslwrap.c. The flaw exists because the application trusts an unchecked 16-bit SNI length field . A network-adjacent attacker can exploit this by sendi...

CVE-2026-125403

Ettercap versions through 0.8.4.1 are vulnerable to an out-of-bounds read and size_t underflow in the sslw_remove_sts() function located in src/ec_sslwrap.c. The flaw is caused by a stale length and an unchecked memmem() result during the stripping of Strict-Transport-Security headers. An attacke...