PT-2026-23568 · Ettercap · Ettercap

Oneafter · Published 2026-03-05 · Updated 2026-03-16 · CVE-2026-3606

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ettercap version 0.8.4-Garofalo

Description A flaw exists in Ettercap that involves an out-of-bounds read issue within the add data segment function located in the src/ettercap/utils/etterfilter/ef output.c file, specifically within the etterfilter component. Local access is necessary for exploitation. The details of the exploit have been publicly disclosed, and the project maintainers have been notified but have not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-125

CWE-119

CWE-787

Related Identifiers

CVE-2026-3606

Affected Products

Ettercap

References · 16

• 🔥 https://github.com/Ettercap/ettercap/issues/1297 · Exploit
• 🔥 https://vuldb.com/?submit.764648 · Exploit
• 🔥 https://github.com/oneafter/0202/blob/main/et/repro · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3606 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-3606 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3606 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-3606 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-3606 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-3606 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3606 · Security Note
• https://t.me/cveNotify/155509 · Telegram Post
• https://github.com/Ettercap/ettercap · Note
• https://twitter.com/vuldb/status/2029860109061697916 · Twitter Post
• https://vuldb.com/?id.349218 · Note
• https://vuldb.com/?ctiid.349218 · Note