Medium severity5.3NVD Advisory· Published Oct 26, 2026· Updated Oct 26, 2026
CVE-2026-116744
CVE-2026-116744
Description
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/ntop/nDPI/blob/6.0/src/lib/protocols/softether.cnvd
- github.com/ntop/nDPI/commit/ca9d819151606377ac53305583fe819748c69be2nvd
- github.com/ntop/nDPI/issues/3291nvd
- github.com/ntop/nDPI/pull/3298nvd
- hackmd.io/@haindpwn/ndpi-softether-host-fqdn-strncmp-oob-readnvd
- www.vulncheck.com/advisories/ntop-ndpi-through-6.0-out-of-bounds-read-in-softether-dissectornvd
News mentions
0No linked articles in our index yet.