CVE-2026-3606CWE-119CWE-125

Ettercap etterfilter ef_output.c add_data_segment out-of-bounds

Medium · published March 5, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etterfilter/ef_output.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00199 · 9.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-125 · Out-of-bounds Read
Published
2026-03-05T22:02Z
EPSS history
Timeline
  • 05 MAR 22:02Z
    Ettercap etterfilter ef_output.c add_data_segment out-of-bounds
    cvelistv5