CVE-2020-15474

Description

References

• ntop/nDPI commit 23594f0 · Patch

Weitere Schwachstellen in ndpi

• CVE-2025-25066HOCH 8.4nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.
• CVE-2021-36082HOCH 8.8ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
• CVE-2020-15476HOCH 7.5In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.
• CVE-2020-15475KRITISCH 9.8In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
• CVE-2020-15473KRITISCH 9.1In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.