Description
A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used. This patch is called 0eaa375c5e5446bfba94a290eff92967a5deac9e. It is advisable to implement a patch to correct this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | bettercap | 2.41.0, 2.41.1, 2.41.2, 2.41.3, 2.41.4, 2.41.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bettercap | 2.33.0-3 | — |
| Debian 13 | bettercap | 2.33.0-1+deb13u1 | — |
| Debian 12 | bettercap | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | bettercap | No fix yet | — |
| Ubuntu 26.04 LTS | bettercap | No fix yet | — |
| Ubuntu 25.10 | bettercap | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | bettercap | No fix yet | — |
| Ubuntu Pro 22.04 LTS | bettercap | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | govulncheck-vulndb | 0.0.20260727T201416-160000.1.1 | SUSE-SU-2026:23227-1, SUSE-SU-2026:23216-1 |
| SLES 16.0 | govulncheck-vulndb | 0.0.20260727T201416-160000.1.1 | SUSE-SU-2026:23227-1, SUSE-SU-2026:23216-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bettercap | 2.41.7-1.1 | openSUSE-SU-2026:10745-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260727T201416-160000.1.1 | openSUSE-SU-2026:21551-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/bettercap/bettercap/v2 | < 2.41.7 | 2.41.7 | GHSA-jcqv-2g3v-gm88 |
Advisories 4
- SUSE-SU-2026:23227-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23216-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Aug 27, 2026
- openSUSE-SU-2026:21551-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Aug 12, 2026
- openSUSE-SU-2026:10745-1 bettercap-2.41.7-1.1 on GA media SUSE / openSUSE Security Updates · May 12, 2026
References
- VDB-362573 | bettercap MySQL Server mysql_server.go integer coercion vdb-entry
- VDB-362573 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #811163 | Bettercap <=v2.41.5 Integer Coercion Error third-party-advisory
- https://github.com/bettercap/bettercap/issues/1265 issue-tracking
- https://github.com/bettercap/bettercap/pull/1266 issue-tracking patch
- https://github.com/bettercap/bettercap/issues/1265#issue-4287957382 exploit issue-tracking
- https://github.com/bettercap/bettercap/commit/0eaa375c5e5446bfba94a290eff92967a5deac9e patch
- https://github.com/bettercap/bettercap/ product