PT-2025-27677 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The issue is a heap-buffer-overflow READ vulnerability. The crash state indicates the vulnerability occurs within the load protocols file fd function in the...

ndpi:fuzz_filecfg_protocols: Heap-buffer-overflow in load_protocols_file_fd

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5762342451478528 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzfilecfgprotocols Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x531000010838 Crash...

PT-2025-26910 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: ndpi affected versions not specified Description: The software contains a use-of-uninitialized-value issue. This occurs within the ndpi strdup function, which is called during ndpi detection process packet processing, as reported in fuzzing...

ndpi:fuzz_config: Use-of-uninitialized-value in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6742003083968512 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfig Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ndpistrdu...

PT-2025-26263 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The issue involves a heap-buffer-overflow read vulnerability. The crash state indicates the following function call sequence: check content type and change...

ndpi:fuzz_process_packet: Heap-buffer-overflow in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6392530621235200 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 11 Crash Address: 0x5040000000c...

ndpi:fuzz_config: Stack-buffer-overflow in ndpi_init_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5376783270871040 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfig Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 3 Crash Address: 0x79f5875146a3 Cras...

CVE-2021-36082

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello...

CVE-2020-15476

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpisearchoracle in lib/protocols/oracle.c...

CVE-2020-11940

In nDPI through 3.2 Stable, an out-of-bounds read in concathashstring in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH protocol messages on a network segment monitored by nDPI's library...

CVE-2020-15471

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpiparsepacketlineinfo in lib/ndpimain.c...

CVE-2020-15473

In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...

CVE-2020-15472

In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpisearchh323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short...

CVE-2020-15475

In nDPI through 3.2, ndpiresetpacketlineinfo in lib/ndpimain.c omits certain reinitialization, leading to a use-after-free...

ndpi:fuzz_filecfg_config: Stack-buffer-overflow in _set_param_flowrisk_enable_disable

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6453487764570112 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzfilecfgconfig Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7c3ff474a7c0...

PT-2025-8701

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A crash issue was identified, characterized as an UNKNOWN WRITE crash type. The crash occurred in the ndpi free flow data function, within the fuzz process packet.c file. No information is...

OSV-2025-154 UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398060128 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo nodecleanupwalker...

PT-2025-8698 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to an unknown read issue. The crash involves the processClientServerHello and processTLSBlock functions, as well as the ndpi search tls udp function. Recommendations: At t...

PT-2025-8699 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash issue was identified, characterized as an UNKNOWN READ. The crash involves the ndpi strdup function, process ndpi collected info function, and node cleanup walker function...

ndpi:fuzz_process_packet: Crash in ndpi_free_flow_data

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5532739667558400 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000fffffff0 Crash State:...