OSV-2020-2298

    Dashboard / Vulnerabilities / OSV-2020-2298

    OSV-2020-2298

    Published: 31 Dec 2020Last Modified: 13 Apr 2022

    Summary: UNKNOWN READ in ndpi_free

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081 ``` Crash type: UNKNOWN READ Crash state: ndpi_free ndpi_free_flow fuzz_process_packet.c ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081

    Affected packages

    Package

    Name: ndpi

    Purl: pkg:generic/ndpi

    Affected ranges

    Type: GIT

    Events:

    Introduced- 32bd3d7a599a6dfcfadf6ed4ad684f904e50719c
    Fixed -68b6ac7da8b2f3c5f0ffa3f29015eefaa37e1ff5

    Affected versions

    3.4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2020-2298 | CVE-DB