Skip to main content

Ndpi CVE-2021-36082

HIGH
Out-of-bounds Write (CWE-787)
2021-07-01 cve@mitre.org
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 01, 2021 - 03:15 nvd
HIGH 8.8

DescriptionNVD

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.

AnalysisAI

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. Affected products include: Ntop Ndpi.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

More in Ndpi

View all
CVE-2020-11939 CRITICAL POC
9.8 Apr 23

In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlle

CVE-2020-15473 CRITICAL POC
9.1 Jul 01

In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/

CVE-2020-15471 CRITICAL POC
9.1 Jul 01

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_in

CVE-2020-15476 HIGH POC
7.5 Jul 01

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protoc

CVE-2020-11940 HIGH POC
7.5 Apr 23

In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positione

CVE-2020-15475 CRITICAL
9.8 Jul 01

In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-aft

CVE-2020-15474 CRITICAL
9.8 Jul 01

In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c. Rated critical severity (CV

CVE-2020-15472 CRITICAL
9.1 Jul 01

In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/proto

CVE-2026-86098 HIGH
8.3 Sep 04

Heap buffer overflow in ntop nDPI before version 6.0 allows unauthenticated network-adjacent or remote attackers to corr

CVE-2025-25066 HIGH
8.1 Feb 03

nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c. Rated h

Share

CVE-2021-36082 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy