Buffer Over-read Vulnerability in nDPI by ntop
CVE-2020-15471

9.1CRITICAL

Key Information:

Vendor

Ntop

Status
Ndpi
Vendor
CVE Published:
1 July 2020

What is CVE-2020-15471?

A vulnerability exists in nDPI's packet parsing code, specifically in the ndpi_parse_packet_line_info function within lib/ndpi_main.c. This issue allows for a heap-based buffer over-read, potentially leading to the exposure of sensitive information. Users of nDPI versions up to 3.2 are advised to apply patches and monitor for any suspicious activity to mitigate the risks associated with this vulnerability.

References

https://github.com/ntop/nDPI/commit/61066fb106efa6d3d95b6...
https://github.com/fuzzing2026/CVE-PoCs/tree/main/ndpi-CV...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.