CVE-2020-15472 | BDVDB-2026-138342 Detail

Description#

In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ntop/nDPI/commit/b7e666e465f138ae48ab81976726e67deed12701
https://lists.debian.org/debian-lts-announce/2022/08/msg00016.html

Exploit#

No public exploit known

History#

Version 12020-07-01Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.