CVE-2020-15476

Description

References

• bugs.chromium.org/p/oss-fuzz/issues/detail · Exploit
• ntop/nDPI commit b69177b · Patch
• lists.debian.org/debian-lts-announce/2020/08/msg00052.html · Issue Tracking
• lists.debian.org/debian-lts-announce/2022/08/msg00016.html · Mailing List

Autres vulnérabilités de ndpi

• CVE-2025-25066ÉLEVÉE 8.4nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.
• CVE-2021-36082ÉLEVÉE 8.8ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
• CVE-2020-15475CRITIQUE 9.8In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
• CVE-2020-15474CRITIQUE 9.8In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.
• CVE-2020-15473CRITIQUE 9.1In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.