CVE-2021-36082

Description

References

• bugs.chromium.org/p/oss-fuzz/issues/detail · Exploit
• google/oss-fuzz-vulns · Third Party Advisory
• ntop/nDPI commit 1ec621c · Patch

Weitere Schwachstellen in ndpi

• CVE-2025-25066HOCH 8.4nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.
• CVE-2020-15476HOCH 7.5In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.
• CVE-2020-15475KRITISCH 9.8In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
• CVE-2020-15474KRITISCH 9.8In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.
• CVE-2020-15473KRITISCH 9.1In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.