Skip to content
OpenAdvisories

Vendor

ntop

12 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 5.3

    ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_match writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp …

  • Medium 5.3

    ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

    ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-c…

  • Medium 4.3

    ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

    CWE-601 URL redirection to untrusted site ('open redirect')