OSV-2020-812

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2020-812.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-812
Published
2020-07-14T05:37:44Z
Modified
2022-04-13T03:32:54Z
Summary
Heap-buffer-overflow in ndpi_netbios_name_interpret
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21809

Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_netbios_name_interpret
ndpi_int_netbios_add_connection
check_ndpi_udp_flow_func
References

Affected packages

OSS-Fuzz / ndpi

Package

Name
ndpi
Purl
pkg:generic/ndpi

Affected ranges

Type
GIT
Repo
https://github.com/ntop/nDPI.git
Events
Introduced
7234f369499e02f44efcbbf0efe43bae596ddc53
Fixed
50f4049b58b9d04a403ba7570935f887aef937db
Fixed
1ec621c85b9411cc611652fd57a892cfef478af3

Affected versions

3.*
3.2
3.4

Ecosystem specific 

{
    "introduced_range": "2efc09a20e6503d99fe3d76fcc16b1892fb7c7ff:5c52c00ea4ad8afaebd5259bc53215a1ab41569f",
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2020-812.yaml"