ndpi:fuzz_ndpi_reader_alloc_fail: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5030685617553408 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireaderallocfail Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000aecc1 Crash...

PT-2022-37038

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash involves the ndpi strdup function, process ndpi collected info function, and ndpi workflow process...

PT-2022-36853

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been identified, with the crash state involving the ndpi workflow process packet function in the fuzz ndpi reader.c...

PT-2022-36848

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with the handling of IPv6 extension headers. The crash occurs in the ndpi handle ipv6 extension...

PT-2022-36645

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the ndpi workflow process packet function, located in the fuzz ndpi reader.c fil...

PT-2020-22118

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the ndpi workflow process packet function, specifically...

PT-2020-21905

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, as indicated ...

PT-2020-22645

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the ndpi workflow process packet function, specifically in the fuzz ndpi reader....

PT-2020-22557

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash occurs in the following functions: process ndpi collected info, packe...

PT-2020-22563

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, located in th...

PT-2020-22199

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions get ndpi flow info6, packet processing, and ndpi workflow process...

PT-2020-21967

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash reported by OSS-Fuzz, with a crash type of UNKNOWN. The crash state involves several functions: get ndpi flow info6, packet...

PT-2020-22301

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, located in th...

PT-2020-22463

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, located in th...

PT-2020-21636

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 2 crash type issue has been identified. The crash state involves the ndpi workflow process packet function, fuzz ndpi reader.c,...

PT-2020-22487

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the ndpi handle ipv6 extension headers function, which is...