ndpi:fuzz_ds_ahocorasick: Use-of-uninitialized-value in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5932049415340032 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzdsahocorasick Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_alg_shoco: Stack-buffer-overflow in shoco_decompress

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4947794864439296 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzalgshoco Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffeb47a0c60 Cra...

OSV-2024-246 UNKNOWN READ in ndpi_detection_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67881 Crash type: UNKNOWN READ Crash state: ndpidetectionprocesspacket fuzzprocesspacket.c...

ndpi:fuzz_process_packet: Crash in ndpi_detection_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6118938061635584 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6081000000b3 Crash State:...

PT-2023-35673 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello and processTLSBlock functions, specifically durin...

ndpi:fuzz_ndpi_reader_alloc_fail: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4811039090737152 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderallocfail Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

PT-2023-35667 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the processClientServerHello and processTLSBlock...

ndpi:fuzz_quic_get_crypto_data: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6635657162194944 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzquicgetcryptodata Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5039861727821824 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x613000086da2...

ndpi:fuzz_filecfg_protocols: Use-of-uninitialized-value in ndpi_patricia_lookup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5655647611650048 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzfilecfgprotocols Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2023-35554 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A stack-buffer-overflow issue was identified, potentially causing a crash. The crash involves the ndpi handle rule and ndpi load protocols file fd...

ndpi:fuzz_filecfg_protocols: Stack-buffer-overflow in ndpi_handle_rule

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6210570824843264 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzfilecfgprotocols Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

PT-2023-35525 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 11 crash has been reported. The crash involves the ndpi snprintf and ndpi serialize string int32 functions in the fuzz...

ndpi:fuzz_serialization: Heap-buffer-overflow in ndpi_snprintf

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4517948733390848 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzserialization Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 11 Crash Address: 0x619000001324 Crash...

ndpi:fuzz_ndpi_reader: Use-of-uninitialized-value in ndpi_domain_classify_contains

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6074382281474048 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2023-35989 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions ndpi domain classify contains, ndpi ge...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_domain_classify_contains

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5440735166726144 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6040000000bd...

ndpi:fuzz_filecfg_protocols: Crash in ndpi_handle_rule

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5561799834206208 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzfilecfgprotocols Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x718100000004 Crash State...

ndpi:fuzz_ndpi_reader: Negative-size-param in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5778695863009280 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

OSV-2023-566 Heap-buffer-overflow in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60557 Crash type: Heap-buffer-overflow READ 1 Crash state: checkcontenttypeandchangeprotocol processresponse ndpicheckhttptcp...