CVE-2026-129432: Ettercap through 0.8.5.1 Heap Out-of-Bounds Read in NFS mountd Dissector

Q: Which deployments are exposed?

Ettercap installations through version 0.8.5.1 are affected when they process NFS mountd traffic containing an RPC MOUNT MNT call. The issue is in the mountd dissector.

Q: What does an attacker need to exploit this issue?

A network-adjacent attacker does not need privileges or user interaction. They need to send a crafted MOUNT MNT call that reaches the affected dissector.

Q: What is the impact of successful exploitation?

The crafted packet can cause an out-of-bounds read of up to 100 bytes past a heap buffer. The disclosed memory may be printed to the console and written to logs.

Q: How can I identify potentially affected systems?

Check whether the installed Ettercap version is 0.8.5.1 or earlier and whether it processes NFS mountd traffic. Console output and logs may contain unexpected memory data after handling MOUNT MNT calls.

Published Nov 14, 2026

Updated

Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissectormountd() in src/dissectors/ecmountd.c that validates RPC credential and directory lengths independently rather than against the packet end. Network-adjacent attackers can send a crafted MOUNT MNT call to read up to 100 bytes past the heap buffer, leaking memory to the console and logs.

Affected Software

1 affected component

Ettercap Ettercap<=0.8.5.1

Event History

Nov 14, 2026

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Ettercap installations through version 0.8.5.1 are affected when they process NFS mountd traffic containing an RPC MOUNT MNT call. The issue is in the mountd dissector.

What does an attacker need to exploit this issue?

A network-adjacent attacker does not need privileges or user interaction. They need to send a crafted MOUNT MNT call that reaches the affected dissector.

What is the impact of successful exploitation?

The crafted packet can cause an out-of-bounds read of up to 100 bytes past a heap buffer. The disclosed memory may be printed to the console and written to logs.

How can I identify potentially affected systems?

Check whether the installed Ettercap version is 0.8.5.1 or earlier and whether it processes NFS mountd traffic. Console output and logs may contain unexpected memory data after handling MOUNT MNT calls.

CVE-2026-129432: Ettercap through 0.8.5.1 Heap Out-of-Bounds Read in NFS mountd Dissector

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

How can I identify potentially affected systems?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

How can I identify potentially affected systems?