ndpi:fuzz_ndpi_reader_pl7m_simplest_internal: Use-of-uninitialized-value in processTLSBlock

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6530401670856704 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderpl7msimplestinternal Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

PT-2025-8698 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to an unknown read issue. The crash involves the processClientServerHello and processTLSBlock functions, as well as the ndpi search tls udp function. Recommendations: At t...

OSV-2023-1364 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65362 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

PT-2023-35673 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello and processTLSBlock functions, specifically durin...

OSV-2023-1354 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65304 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

OSV-2022-445 Stack-buffer-overflow in tlsCheckUncommonALPN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47730 Crash type: Stack-buffer-overflow WRITE Crash state: tlsCheckUncommonALPN processClientServerHello processTLSBlock...

PT-2022-37012

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash, specifically a WRITE crash. The crash occurs in the tlsCheckUncommonALPN function, which is called b...

OSV-2022-48 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

WS-2022-0032

Heap-buffer-overflow in processClientServerHello. OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

PT-2022-37036

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, which occurs during the processing of TLS packets. The crash state indicates that the issue happens in the...

PT-2021-27867

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves functions such as processClientServerHello,...

OSV-2021-784 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34500 Crash type: Heap-buffer-overflow READ 1 Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...

PT-2021-28269

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the processClientServerHello and processTLSBlock functions, specifically durin...

OSV-2021-304 Stack-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30393 Crash type: Stack-buffer-overflow WRITE 6 Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...

PT-2021-28054

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow issue was identified, which can cause a crash. The crash occurs in the processClientServerHello and processTLSBlock functions,...

OSV-2020-1075 Use-of-uninitialized-value in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21349 Crash type: Use-of-uninitialized-value Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...

OSV-2020-1082 Use-of-uninitialized-value in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21296 Crash type: Use-of-uninitialized-value Crash state: processClientServerHello processTLSBlock ndpisearchtlstcp...

OSV-2020-919 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21363 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

PT-2020-21824

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ndpi strdup function, which is called by...

PT-2020-21691

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the processClientServerHello and processTLSBlock function...