OSV-2020-154

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2020-154.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-154
Published
2020-06-24T01:51:16.532133Z
Modified
2022-04-13T03:04:36.204911Z
Summary
Heap-buffer-overflow in search_valid_dns
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21263

Crash type: Heap-buffer-overflow READ 1
Crash state:
search_valid_dns
ndpi_search_dns
check_ndpi_udp_flow_func
References

Affected packages

OSS-Fuzz / ndpi

Package

Name
ndpi
Purl
pkg:generic/ndpi

Affected ranges

Type
GIT
Repo
https://github.com/ntop/nDPI.git
Events
Introduced
7234f369499e02f44efcbbf0efe43bae596ddc53
Fixed
c6acf97bfbe5ad26db3c2f5dd4d379ac674d6fb3

Affected versions

3.*

3.2

Ecosystem specific 

{
    "severity": "MEDIUM",
    "introduced_range": "2efc09a20e6503d99fe3d76fcc16b1892fb7c7ff:5c52c00ea4ad8afaebd5259bc53215a1ab41569f"
}