Heap Out of Bounds Read Vulnerability in Ettercap by Ettercap

CVE-2026-129431

What is CVE-2026-129431?

Ettercap versions up to 0.8.5.1 are affected by a heap out-of-bounds read vulnerability located in the dissector_socks() function. This flaw allows network-adjacent attackers to exploit unchecked lengths in SOCKS5 authentication packets, enabling them to read past the heap buffer by up to 255 bytes. Consequently, this vulnerability can result in unauthorized disclosure of sensitive information, such as captured SOCKS5 credentials, which may be logged by the application. The issue emphasizes the importance of proper input validation and buffer management in network communication protocols.

References