DEBIAN-CVE-2026-125402: High severity debian/ettercap vulnerability
Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslwgetclienthellosni() in src/ecsslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted TLS ClientHello messages during SSL interception to leak up to 64 KB of heap memory upstream or crash Ettercap.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Ettercap deployments performing SSL interception are exposed, because the vulnerable function processes TLS ClientHello SNI data during interception.
What does an attacker need to exploit it?
An unauthenticated network-adjacent attacker needs to send a crafted TLS ClientHello message with a manipulated 16-bit SNI length field. No user interaction is required.
What is the practical impact of successful exploitation?
An attacker can cause Ettercap to read beyond a heap buffer, potentially leaking up to 64 KB of heap memory upstream or crashing the Ettercap process.
Which versions are identified as affected?
The issue is reported in Ettercap through version 0.8.4.1.