CVE-2026-3606

LOW

Ettercap 0.8.4-Garofalo - Memory Corruption

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etterfilter/ef_output.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References (6)

Core 6
Core References
Various Sources product
https://github.com/Ettercap/ettercap/
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.349218
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.349218
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.764648
Issue Tracking issue-tracking
https://github.com/Ettercap/ettercap/issues/1297

Scores

CVSS v3 3.3
EPSS 0.0016
EPSS Percentile 5.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-125 CWE-787
Status published
Products (1)
ettercap-project/ettercap 0.8.4
Published Mar 05, 2026
Tracked Since Mar 06, 2026