WS-2020-0347

nDPI in versions 3.2 is vulnerable to Stack-buffer-overflow in ndpisearchkerberos, related to src/lib/protocols/kerberos.c...

Debian DLA-2354-1 : ndpi security update

An issue has been found in ndpi, an extensible deep packet inspection library. The Oracle protocol dissector contains an heap-based buffer over-read, which could crash the application that uses this library and may result in denial of service. For Debian 9 stretch, this problem has been fixed in...

Debian: Security Advisory (DLA-2354-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2354-1] ndpi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2354-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 29, 2020 https://wiki.debian.org/LTS -...

DLA-2354-1 ndpi - security update

Bulletin has no description...

ndpi:fuzz_ndpi_reader: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5656304459448320 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash...

PT-2020-21905

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, as indicated ...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6256390180700160 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000140...

OSV-2020-956 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20644 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c HonggfuzzPersistentLoop...

PT-2020-22630

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search h323, check ndpi udp flow func, and ndpi detection...

PT-2020-22661

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions ndpi search oscar, check ndpi tcp flow func, and ndpi detection...

PT-2020-21648

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the ndpi search amazon video, check ndpi tcp flow func, and ndpi detection proces...

PT-2020-22626

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of function...

PT-2020-21716

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search h323, check ndpi tcp flow func, and ndpi detection...

PT-2020-21757

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions ndpi search mail smtp tcp, check ndpi tcp flow func, and ndpi...

PT-2020-22652

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves functions such as ndpi search irc tcp, check ndpi t...

PT-2020-22645

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the ndpi workflow process packet function, specifically in the fuzz ndpi reader....

PT-2020-21686

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the processClientServerHello and processTLSBlock function...

PT-2020-21646

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the ndpi search mail smtp tcp function, which is called b...

PT-2020-21691

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the processClientServerHello and processTLSBlock function...