CVE-2020-15473: Out-of-bounds Read

In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...

OSV-2020-18 Heap-buffer-overflow in ndpi_search_openvpn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22244 Crash type: Heap-buffer-overflow READ 8 Crash state: ndpisearchopenvpn checkndpiudpflowfunc ndpidetectionprocesspacket...