Threats tagged 'ghsa-7xp2-vr9x-v8pj'

Ettercap versions through 0.8.4.1 have a heap out-of-bounds read vulnerability in the sslw_get_clienthello_sni() function. This flaw arises from trusting an unchecked 16-bit Server Name Indication (SNI) length field in TLS ClientHello messages during SSL interception. An attacker on the network adjacent to the victim can exploit this by sending crafted TLS ClientHello messages to leak up to 64 KB of heap memory or cause Ettercap to crash.