OSV-2022-443

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-443

Published

2022-05-31T00:00:50.179754Z

Modified

2022-05-31T00:00:50.180013Z

Summary

Heap-buffer-overflow in ndpi_search_http_tcp

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47724

Crash type: Heap-buffer-overflow READ 12
Crash state:
ndpi_search_http_tcp
check_ndpi_detection_func
ndpi_check_flow_func

References

Affected packages

Type: GIT
Repo: https://github.com/ntop/nDPI.git
Events: Introduced

f25deeccb1ccbebd6346271828762fdd8326c32b

Fixed

c4f50b2cdac989cc89930564a88a5caab85c7214

{
    "severity": "MEDIUM"
}