← All advisories

High severity7.5NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-15476

CVE-2020-15476

Description

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.

Affected products

8

nDPI/nDPIdescription
Ntop/nDPIllm-fuzzy
Range: <=3.2
osv-coords6 versions
pkg:deb/ubuntu/ndpi?arch=src?distro=esm-apps/bionic pkg:deb/ubuntu/ndpi?arch=src?distro=esm-apps/xenial pkg:deb/ubuntu/ndpi?arch=src?distro=focal pkg:deb/ubuntu/ndpi?arch=src?distro=jammy pkg:deb/ubuntu/ndpi?arch=src?distro=noble pkg:deb/ubuntu/ndpi?arch=src?distro=oracular
>= 0+ 5 more
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0

Patches

Vulnerability mechanics

References

4

github.com/ntop/nDPI/commit/b69177be2fbe01c2442239a61832c44e40136c05nvdPatchThird Party Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2020/08/msg00052.htmlnvdIssue TrackingThird Party Advisory
lists.debian.org/debian-lts-announce/2022/08/msg00016.htmlnvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.