Approved changes feed: RSS · Atom
cpe:2.3:a:ntop:ndpi:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ntop (36c4641a-90b9-5196-8d0f-21750543701f) |
|---|---|
| Product | Ndpi (e50f706f-80ae-55f6-aac6-3655cbcc9e32) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/eglooca/ndpi |
purl2cpe | 2026-06-01 10:14:48.741911 |
pkg:deb/debian/ndpi |
purl2cpe | 2026-06-01 10:14:48.741914 |
pkg:deb/ubuntu/ndpi |
purl2cpe | 2026-06-01 10:14:48.741916 |
pkg:github/ntop/ndpi |
purl2cpe | 2026-06-01 10:14:48.741919 |
pkg:gitlab/kalilinux/ndpi |
purl2cpe | 2026-06-01 10:14:48.741922 |
pkg:rpm/opensuse/ndpi |
purl2cpe | 2026-06-01 10:14:48.741924 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116744 |
vulnerable | 2026-11-03 10:15:22.012460 |
ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector
MEDIUM (5.3)
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.
Published: 2026-10-26T21:52:42.875Z
Updated: 2026-10-31T02:01:54.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86098 |
vulnerable | 2026-09-16 04:32:58.713659 |
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
HIGH (7.4)
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.
Published: 2026-09-04T22:38:48.064Z
Updated: 2026-09-14T19:33:07.375Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25066 |
vulnerable | 2026-06-08 07:12:50.648810 |
Details available
HIGH (8.1)
nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.
Published: 2025-02-03T00:00:00.000Z
Updated: 2025-02-12T20:41:37.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15476 |
vulnerable | 2026-06-08 05:19:25.954991 |
Details available
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.
Published: 2020-07-01T10:53:46.000Z
Updated: 2024-08-04T13:15:20.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15475 |
vulnerable | 2026-06-08 05:19:25.954587 |
Details available
In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
Published: 2020-07-01T10:53:58.000Z
Updated: 2024-08-04T13:15:20.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15474 |
vulnerable | 2026-06-08 05:19:25.954208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15473 |
vulnerable | 2026-06-08 05:19:25.953915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15472 |
vulnerable | 2026-06-08 05:19:25.953575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15471 |
vulnerable | 2026-06-08 05:19:25.947443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11940 |
vulnerable | 2026-06-08 05:17:55.364702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11939 |
vulnerable | 2026-06-08 05:17:55.364140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.