Approved changes feed: RSS · Atom

cpe:2.3:a:ntop:ndpi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNtop (36c4641a-90b9-5196-8d0f-21750543701f)
ProductNdpi (e50f706f-80ae-55f6-aac6-3655cbcc9e32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/eglooca/ndpi purl2cpe 2026-06-01 10:14:48.741911
pkg:deb/debian/ndpi purl2cpe 2026-06-01 10:14:48.741914
pkg:deb/ubuntu/ndpi purl2cpe 2026-06-01 10:14:48.741916
pkg:github/ntop/ndpi purl2cpe 2026-06-01 10:14:48.741919
pkg:gitlab/kalilinux/ndpi purl2cpe 2026-06-01 10:14:48.741922
pkg:rpm/opensuse/ndpi purl2cpe 2026-06-01 10:14:48.741924

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25066 vulnerable 2026-06-08 07:12:50.648810 Details available
HIGH (8.1)
nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.
Published: 2025-02-03T00:00:00.000Z
Updated: 2025-02-12T20:41:37.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15476 vulnerable 2026-06-08 05:19:25.954991 Details available
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.
Published: 2020-07-01T10:53:46.000Z
Updated: 2024-08-04T13:15:20.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15475 vulnerable 2026-06-08 05:19:25.954587 Details available
In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
Published: 2020-07-01T10:53:58.000Z
Updated: 2024-08-04T13:15:20.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15474 vulnerable 2026-06-08 05:19:25.954208 Details available
In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.
Published: 2020-07-01T10:54:08.000Z
Updated: 2024-08-04T13:15:20.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15473 vulnerable 2026-06-08 05:19:25.953915 Details available
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.
Published: 2020-07-01T10:54:17.000Z
Updated: 2026-01-26T16:34:17.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15472 vulnerable 2026-06-08 05:19:25.953575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15471 vulnerable 2026-06-08 05:19:25.947443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11940 vulnerable 2026-06-08 05:17:55.364702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11939 vulnerable 2026-06-08 05:17:55.364140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.