AZL-99945
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99945.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-99945
- Upstream
- Published
- 2026-09-04T23:18:03Z
- Modified
- 2026-09-12T05:27:53Z
- Summary
- CVE-2026-86098 affecting package ntopng 5.2.1-6
- Details
-
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.
- References