CVE-2020-15476

Опубликовано: 01 июл. 2020

Источник: debian

EPSS Низкий

Описание

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.

Пакет	Статус	Версия исправления	Релиз	Тип
ndpi	fixed	3.4-1		package

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780
https://github.com/ntop/nDPI/commit/b69177be2fbe01c2442239a61832c44e40136c05 (3.4)

EPSS

Процентиль: 77%

0.01065

Низкий

CVE-2020-15476

CVSS3: 7.5

ubuntu

больше 5 лет назад

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.

CVE-2020-15476

CVSS3: 7.5

nvd

больше 5 лет назад

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.

GHSA-6f7g-9q5v-x6x8

CVSS3: 7.5

github

больше 3 лет назад

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.

EPSS

Процентиль: 77%

0.01065

Низкий