EUVD-2026-120566

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125403

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125403: ettercap: Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts() in…

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125403 Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts

Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests in src/ecsslwrap.c, caused by a stale length and an unchecked memmem result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap'...

CVE-2026-125403

Ettercap versions through 0.8.4.1 are vulnerable to an out-of-bounds read and size_t underflow in the sslw_remove_sts() function located in src/ec_sslwrap.c. The flaw is caused by a stale length and an unchecked memmem() result during the stripping of Strict-Transport-Security headers. An attacke...