CVE-2025-25066

Description

References

• ntop/nDPI commit 678697b · Patch

More vulnerabilities in ndpi

• CVE-2021-36082HIGH 8.8ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
• CVE-2020-15476HIGH 7.5In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.
• CVE-2020-15475CRITICAL 9.8In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
• CVE-2020-15474CRITICAL 9.8In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.
• CVE-2020-15473CRITICAL 9.1In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.