OSV-2023-19

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-19

Published

2023-01-20T13:02:10.969546Z

Modified

2023-01-20T13:02:10.969774Z

Summary

Heap-buffer-overflow in ndpi_search_bittorrent

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218

Crash type: Heap-buffer-overflow READ {*}
Crash state:
ndpi_search_bittorrent
check_ndpi_detection_func
ndpi_check_flow_func

References

Affected packages

Type: GIT
Repo: https://github.com/ntop/nDPI.git
Events: Introduced

470eaa6ff388435d7233ff2680e3ea013068d1fe

Fixed

f95bdaf625a540cbd040508bfbb8808223f97aed

{
    "severity": "MEDIUM"
}