← All advisories

Critical severity9.8NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-15475

CVE-2020-15475

Description

In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.

Affected products

8

nDPI/nDPIdescription
Ntop/nDPIllm-fuzzy
Range: <=3.2
osv-coords6 versions
pkg:deb/ubuntu/ndpi?arch=src?distro=esm-apps/bionic pkg:deb/ubuntu/ndpi?arch=src?distro=esm-apps/xenial pkg:deb/ubuntu/ndpi?arch=src?distro=focal pkg:deb/ubuntu/ndpi?arch=src?distro=jammy pkg:deb/ubuntu/ndpi?arch=src?distro=noble pkg:deb/ubuntu/ndpi?arch=src?distro=oracular
>= 0+ 5 more
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0

Patches

Vulnerability mechanics

References

1

github.com/ntop/nDPI/commit/6a9f5e4f7c3fd5ddab3e6727b071904d76773952nvdPatchVendor Advisory

News mentions

0

No linked articles in our index yet.