GHSA-c8vx-3h2j-4f8mHighCVSS 7.4
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the...
🔗 CVE IDs covered (1)
📋 Description
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-86098
- https://github.com/ntop/nDPI/commit/94e82c1de12323d992895830231865736a8abf2c
- https://github.com/ntop/nDPI
- https://github.com/ntop/nDPI/blob/5.0/src/lib/ndpi_serializer.c
- https://www.vulncheck.com/advisories/ntop-ndpi-before-6.0-heap-buffer-overflow-via-ndpi-json-string-escape
- https://github.com/advisories/GHSA-c8vx-3h2j-4f8m