Description
A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of the component zerogod IPP Service. Performing a manipulation results in integer coercion error. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used. The patch is named 3731d5576cffae9eefe3721cd46a40933304129f. To fix this issue, it is recommended to deploy a patch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | bettercap | 2.41.0, 2.41.1, 2.41.2, 2.41.3, 2.41.4, 2.41.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | bettercap | No fix yet | — |
| Ubuntu 26.04 LTS | bettercap | No fix yet | — |
| Ubuntu 25.10 | bettercap | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | bettercap | No fix yet | — |
| Ubuntu Pro 22.04 LTS | bettercap | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bettercap | 2.41.7-1.1 | openSUSE-SU-2026:10745-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/bettercap/bettercap | all versions | — | GO-2026-5003 |
| Go | github.com/bettercap/bettercap/v2 | < 2.41.7 | 2.41.7 | GHSA-322p-rrj6-j44g |
Advisories 2
- openSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Jul 31, 2026
- openSUSE-SU-2026:10745-1 bettercap-2.41.7-1.1 on GA media SUSE / openSUSE Security Updates · May 12, 2026
References
- VDB-362572 | bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion vdb-entry technical-description
- VDB-362572 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #811145 | bettercap <=v2.41.5 Integer Coercion Error third-party-advisory
- https://github.com/bettercap/bettercap/issues/1263 issue-tracking
- https://github.com/bettercap/bettercap/pull/1264 issue-tracking patch
- https://github.com/user-attachments/files/26852847/poc.py exploit
- https://github.com/bettercap/bettercap/commit/3731d5576cffae9eefe3721cd46a40933304129f patch
- https://github.com/bettercap/bettercap/ product