In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpisearchoracle in lib/protocols/oracle.c.
[
{
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/ntop/ndpi/commit/b69177be2fbe01c2442239a61832c44e40136c05",
"id": "CVE-2020-15476-b306b689",
"digest": {
"line_hashes": [
"151421861815259676817966769405540039223",
"99843940354578634962366791650250586667",
"254804458068887307105421089365198312065",
"50812903378050002652926133157812890151"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "src/lib/protocols/oracle.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/ntop/ndpi/commit/b69177be2fbe01c2442239a61832c44e40136c05",
"id": "CVE-2020-15476-bfafaa39",
"digest": {
"function_hash": "4071782200238668951249389807739088471",
"length": 1056.0
},
"signature_type": "Function",
"target": {
"function": "ndpi_search_oracle",
"file": "src/lib/protocols/oracle.c"
}
}
]