{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ettercap--0.8.4.1--0.8.4.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-125404"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Ettercap \u003c= 0.8.4.1 (\u003c= 0.8.4.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eEttercap versions through 0.8.4.1 contain an integer underflow in \u003ccode\u003eccmp_decrypt()\u003c/code\u003e in \u003ccode\u003esrc/ec_encryption_ccmp.c\u003c/code\u003e due to a failure to check the minimum length when subtracting the 8-byte CCMP trailer. Attackers on a network where the WPA key is loaded can send a short, crafted CCMP frame to overflow a stack buffer in the Ettercap process, which normally runs as root.\u003c/p\u003e\n","date_modified":"2026-11-10T02:05:39Z","date_published":"2026-11-10T02:05:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ettercap-integer-underflow/","summary":"Ettercap versions through 0.8.4.1 contain an integer underflow in the ccmp_decrypt function that can result in a stack buffer overflow.","title":"Ettercap: Integer underflow in ccmp_decrypt (CVE-2026-125404)","url":"https://feed.craftedsignal.io/briefs/2026-11-ettercap-integer-underflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Ettercap \u003c= 0.8.4.1 (\u003c= 0.8.4.1)","version":"https://jsonfeed.org/version/1.1"}