Bug 2569599 (CVE-2026-125401)

Summary: CVE-2026-125401 ettercap: Ettercap: Heap buffer overflow via crafted Gadu-Gadu traffic
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Ettercap. An unauthenticated attacker on a monitored network can trigger a Denial of Service (DoS) or potentially execute arbitrary code by sending specially crafted Gadu-Gadu protocol traffic. This issue is caused by a heap-based buffer overflow in the network packet dissector, which fails to properly limit incoming version data and corrupts process memory. Because the application typically runs with elevated privileges, this flaw may allow an attacker to compromise the host system.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-11-10 13:10:22 UTC 
Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root.