Potential Stack-Based Buffer Overflow in nDPI by ntop
CVE-2025-25066

8.1HIGH

Key Information:

Vendor

Ntop

Status
Ndpi
Vendor
CVE Published:
3 February 2025

What is CVE-2025-25066?

nDPI, up to version 4.12, contains a potential stack-based buffer overflow vulnerability in the function ndpi_address_cache_restore located in lib/ndpi_cache.c. This flaw could be exploited under specific conditions, potentially allowing an attacker to compromise the affected systems or execute arbitrary code.

Affected Version(s)

nDPI 0 <= 4.12

References

https://github.com/ntop/nDPI/commit/678697b5eb6c3caa5dd5f...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.