ndpi:fuzz_ndpi_reader: Segv on unknown address in ndpi_snprintf

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4661103107309568 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ndpi:fuzz_process_packet: Segv on unknown address in ndpi_free_flow_data

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6138189421281280 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzprocesspacket Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ndpi:fuzz_quic_get_crypto_data: Heap-buffer-overflow in quic_len

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5368116959313920 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzquicgetcryptodata Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

OSV-2024-1380 Index-out-of-bounds in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383911300 Crash type: Index-out-of-bounds Crash state: ndpisearchdns searchdnsagain ndpidetectionprocesspacket...

PT-2024-40643 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the functions ndpi search dns, search dns again, and ndpi...

ndpi:fuzz_ndpi_reader_pl7m_simplest_internal: Index-out-of-bounds in ndpi_search_dns

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5759495480868864 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderpl7msimplestinternal Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

ndpi:fuzz_ndpi_reader_pl7m: Use-of-uninitialized-value in keep_extra_dissection

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4576116020412416 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderpl7m Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2024-40635 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves functions such as zoom search again, ndpi detection...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in zoom_search_again

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6411333660114944 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5040001835f4...

PT-2024-40634

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 16 crash has been reported. The crash involves the functions ndpi search mikrotik, check ndpi detection func, and ndpi...

ndpi:fuzz_ndpi_reader_pl7m_simplest_internal: Heap-buffer-overflow in ndpi_search_mikrotik

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5767884694945792 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireaderpl7msimplestinternal Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

ndpi:fuzz_ndpi_reader_pl7m_64k: Heap-buffer-overflow in ndpi_base64_decode

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4824371635486720 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireaderpl7m64k Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50800000007e Crash...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4791875258613760 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5060005fdd1f Cras...

ndpi:fuzz_ndpi_reader_pl7m: Stack-buffer-overflow in ndpi_init_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6377181921476608 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireaderpl7m Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 3 Crash Address:...

ndpi:fuzz_ndpi_reader_pl7m_simplest: Heap-buffer-overflow in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5163351229923328 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderpl7msimplest Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address:...

PT-2024-40796

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndpi search zoom, check ndpi detection func, and ndpi...

ndpi:fuzz_ndpi_reader: Crash in ndpi_search_zoom

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5873892399841280 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x507100000f8d Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5408062507646976 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5040000000bb Crash State:...

ndpi:fuzz_ds_domain_classify: Use-of-uninitialized-value in ndpi_domain_classify_hostname

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6158855263289344 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzdsdomainclassify Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_compute_ja4

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5144600307105792 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...