CVE-2020-15471

Опубликовано: 01 июл. 2020

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c.

Ссылки

https://github.com/fuzzing2026/CVE-PoCs/tree/main/ndpi-CVE-2020-15471
https://github.com/ntop/nDPI/commit/61066fb106efa6d3d95b67e47b662de208b2b622
Patch
Third Party Advisory
https://github.com/ntop/nDPI/commit/61066fb106efa6d3d95b67e47b662de208b2b622
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ntop:ndpi:*:*:*:*:*:*:*:*

Версия до 3.2 (включая)

EPSS

Процентиль: 68%

0.00559

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2020-15471

CVSS3: 9.1

ubuntu

больше 5 лет назад

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c.

CVE-2020-15471

CVSS3: 9.1

debian

больше 5 лет назад

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-b ...

GHSA-4hxq-5wx8-9jq2

CVSS3: 9.1

github

больше 3 лет назад

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c.

EPSS

Процентиль: 68%

0.00559

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125