UBUNTU-CVE-2026-125401: Buffer Overflow

Published Nov 10, 2026

Updated

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion() in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root.

Affected Software

7 affected components

ubuntu/ettercap*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments of Ettercap through 0.8.4.1 that monitor network traffic containing Gadu-Gadu connections on TCP port 8074 are exposed. The vulnerable parsing occurs in the Ettercap process, which normally runs as root.

What does an attacker need to exploit it?

An attacker needs to send Gadu-Gadu traffic with a crafted version field over TCP port 8074 such that it passes through a network monitored by Ettercap. No prior privileges or user interaction are indicated.

What is the potential impact of a successful exploit?

The crafted field can overflow a 30-byte heap allocation by writing up to 44 bytes, corrupting heap memory in the Ettercap process. The available severity data rates impact to integrity and availability as high, and the process normally runs as root.

UBUNTU-CVE-2026-125401: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact of a successful exploit?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact of a successful exploit?