CVE-2026-125401 Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissector
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-125401?
CVE-2026-125401 is a high-severity vulnerability in ettercap, published on 9 Nov 2026.
Official description
Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root.
Weakness: CWE-122
Which versions are affected by CVE-2026-125401?
How do I fix CVE-2026-125401?
No fix has been published for CVE-2026-125401 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-125401 being exploited?
There is no known exploitation of CVE-2026-125401 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-125401, GHSA-c4g2-78xj-7j7r, GHSA-vrjv-f8gv-2h35, UBUNTU-CVE-2026-125401.