CVE-2026-125403: Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts
Ettercap through 0.8.4.1 contains an out-of-bounds read and sizet underflow vulnerability in sslwremovests() in src/ecsslwrap.c, caused by a stale length and an unchecked memmem() result when stripping Strict-Transport-Security headers. A malicious HTTPS server whose response passes through Ettercap's SSL interception can trigger out-of-bounds reads and memory corruption in the Ettercap process, which normally runs as root.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using Ettercap through 0.8.4.1 are exposed when SSL interception is enabled and HTTPS responses from a malicious server pass through the Ettercap process. The vulnerable header-processing path is involved when stripping Strict-Transport-Security headers.
What does an attacker need to exploit it?
An attacker needs to operate or control a malicious HTTPS server and cause its response to traverse Ettercap's SSL interception. No privileges or user interaction are required according to the provided severity vector.
What is the likely impact on the host running Ettercap?
A crafted response can trigger out-of-bounds reads and memory corruption in the Ettercap process. Because that process normally runs as root, successful exploitation may affect a highly privileged process.