ND
Product
nDPI
12
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 5Medium 1Low 0
Watch
Add nDPI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15475 | 9.8 | Jul 1 | In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free Affected: through 3.2 |
| CVE-2020-15474 | 9.8 | Jul 1 | In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c Affected: through 3.2 |
| CVE-2020-11939 | 9.8 | Apr 23 | In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in concat_hash_string in ssh.c Affected: through 3.2 |
| CVE-2020-15473 | 9.1 | Jul 1 | In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c Affected: through 3.2 |
| CVE-2020-15472 | 9.1 | Jul 1 | In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a payload packet length… Affected: through 3.2 |
| CVE-2020-15471 | 9.1 | Jul 1 | In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c Affected: through 3.2 |
Showing 6