ndff

ndff nDPI for fluentd ndff is a flow collector with nDPI library for fluentd. ndff has been implemented on the basis of ndpiReader which is an example in nDPI. Overview nDPI is an open source LGPLv3 library for deep-packet inspection. ndpiReader is an example in nDPI which has the following...

nDPI

nDPI What is nDPI ? nDPI® is an open source LGPLv3 library for deep-packet inspection. Some dissectors are released under a dual-license: please refer to README.license.md for more information. A generic FAQ about nDPI is available here How To Compile nDPI In order to compile this project do...

SUSE CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

Linux Distros Unpatched Vulnerability : CVE-2026-116744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte cou...

CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

EUVD-2026-110492

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

DEBIAN-CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

UBUNTU-CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744

The ntop nDPI software (versions through 6.0 ) is vulnerable to an out-of-bounds read within the dissect_softether_host_fqdn() function in softether.c. The root cause is the use of consumed byte count instead of data length when comparing host_name. A remote attacker can exploit this by sending c...

CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

PT-2026-125493

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect softether host fqdn in softether.c that compares host name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strnc...

ndpi:fuzz_ndpi_reader_nalloc: Use-of-uninitialized-value in processHandshakeTLSBlock

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5685346470526976 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireadernalloc Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2026-121497

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=571356131 Crash type: Use-of-uninitialized-value Crash state: processHandshakeTLSBlock ndpi search tls tcp internal ndpi search tls wrapper...

ndpi:fuzz_ndpi_reader_alloc_fail: Use-of-uninitialized-value in processHandshakeTLSBlock

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5103420412067840 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderallocfail Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

SUSE CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...

Linux Distros Unpatched Vulnerability : CVE-2026-88357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer...