OSV-2023-1375

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1375

Published

2023-12-31T00:10:56.069235Z

Modified

2023-12-31T00:10:56.069852Z

Summary

Heap-buffer-overflow in IEC104Stats::processPacket

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65402

Crash type: Heap-buffer-overflow READ 1
Crash state:
IEC104Stats::processPacket
Flow::processIEC60870Packet
NetworkInterface::processPacket

References

Affected packages

Type: GIT
Repo: https://github.com/ntop/ntopng.git
Events: Introduced

35b09487b9e38f11e5e01fc3cf9eb60b1b493f7c

Fixed

c4686ad6880a906245577e685cb4569cf2eb90ae

{
    "severity": "MEDIUM"
}