Heap Buffer Overflow in Ettercap Affects Gadu-Gadu Traffic Handling
CVE-2026-125401

7.2HIGH

Key Information:

Vendor

Ettercap

Status
Ettercap
Vendor
CVE Published:
9 November 2026

What is CVE-2026-125401?

Ettercap, a popular network security tool, contains a vulnerability in the Gadu-Gadu protocol dissector that allows remote attackers to exploit a heap buffer overflow. This occurs due to improper handling of crafted version fields in Gadu-Gadu traffic sent over TCP port 8074. The flaw can be exploited to overwrite memory in the Ettercap process, potentially allowing attackers holding root privileges to corrupt memory, which can lead to arbitrary code execution or application instability. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

ettercap 0 <= 0.8.4.1

References

https://github.com/Ettercap/ettercap/security/advisories/...
vendor-advisory
https://github.com/Ettercap/ettercap/commit/1d8badb713579...
patch
https://github.com/Ettercap/ettercap/pull/1330
issue-trackingpatch

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adiel Sol, Arad Inbar, Erez Cohen, Nir Somech, Ben Grinberg, Daniel Lubel, Shir Sadon (DREAM Security Research Team)
Emilio Escobar
.