OSV-2020-1133 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21289 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpitcpflowfunc ndpidetectionprocesspacket...

OSV-2020-922 Heap-buffer-overflow in ndpi_search_h323

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22342 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchh323 checkndpiudpflowfunc ndpidetectionprocesspacket...

CVE-2020-15472

In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpisearchh323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short...