OSV-2023-504

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-504

Published

2023-06-22T14:02:08.576791Z

Modified

2023-10-23T14:16:27.982449Z

Summary

Heap-buffer-overflow in ndpi_search_line

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60003

Crash type: Heap-buffer-overflow READ 1
Crash state:
ndpi_search_line
check_ndpi_detection_func
ndpi_check_flow_func

References

Affected packages

Type: GIT
Repo: https://github.com/ntop/nDPI.git
Events: Introduced

66bee475ae1b1f4b1b4104555b7bb4d38c3e20b6

Fixed

8dbd591053274fc1faddc1eff355fda9f5ad79a5

{
    "severity": "HIGH"
}

{
    "fixed_range": "04be3080921507b69899d01bc79be86181e6f536:8dbd591053274fc1faddc1eff355fda9f5ad79a5"
}