OSV-2020-956

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2020-956.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-956
Published
2020-07-22T00:00:25.708813Z
Modified
2022-04-13T03:04:35.902440Z
Summary
Heap-buffer-overflow in ndpi_workflow_process_packet
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20644

Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_workflow_process_packet
fuzz_ndpi_reader.c
HonggfuzzPersistentLoop
References

Affected packages

OSS-Fuzz / ndpi

Package

Name
ndpi
Purl
pkg:generic/ndpi

Affected ranges

Type
GIT
Repo
https://github.com/ntop/nDPI.git
Events
Introduced
98d9f524f9ff7746d0345939fe543020f8057212
Fixed
bf7dcd63c3a663cd0e1e8c567511ccfd8047d24a

Ecosystem specific 

{
    "severity": "MEDIUM",
    "introduced_range": "unknown:98d9f524f9ff7746d0345939fe543020f8057212"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2020-956.yaml"