Threats tagged 'ghsa-jm32-pvjr-4mch'

Ettercap versions up to 0.8.5.1 have a heap out-of-bounds read vulnerability in the dissector_socks() function. This flaw allows network-adjacent attackers to read heap memory by sending crafted SOCKS5 authentication packets with unchecked username/password lengths. The vulnerability can lead to disclosure of sensitive memory contents, including credentials logged by Ettercap.