Heap Out-of-Bounds Read Vulnerability in Ettercap by Ettercap Project

CVE-2026-129432

What is CVE-2026-129432?

The Ettercap product, up to version 0.8.5.1, is susceptible to a heap out-of-bounds read vulnerability in the dissector_mountd() function. The vulnerability occurs due to improper validation of RPC credentials and directory lengths, which allows network-adjacent attackers to exploit this weakness. By crafting a malicious MOUNT MNT call, attackers can read up to 100 bytes past the allocated heap buffer. This leak potentially reveals sensitive memory contents, which may be logged or printed to the console, posing a significant risk to network security.

References