Skip to main content
VulnerabilityPublished Updated

ndpi_search_l2tp · Heap-buffer-overflow

Affects ndpiSource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Patch
Available – fixed in 7393261e8819b5db69f1773014de5bbb4eb32fa1, 0c81498aa16332e75dda8eeb63a6f45f8fc2be09

Data as of 4 Nov 2026, 15:31 UTC

What to do

Upgrade ndpi to 7393261e8819b5db69f1773014de5bbb4eb32fa1 or 0c81498aa16332e75dda8eeb63a6f45f8fc2be09.

Affected software

ProductAffectedFixed in
OSS-Fuzzndpipkg:generic/ndpiOther threatsAffected
  • >=b17e3ae7769f49abf40738c52b1931270181de92 <0c81498aa16332e75dda8eeb63a6f45f8fc2be09
  • <7393261e8819b5db69f1773014de5bbb4eb32fa1
Fixed in
  • 0c81498aa16332e75dda8eeb63a6f45f8fc2be09
  • 7393261e8819b5db69f1773014de5bbb4eb32fa1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and has been applied in the fixed versions identified by the commit hashes 7393261e8819b5db69f1773014de5bbb4eb32fa1 and 0c81498aa16332e75dda8eeb63a6f45f8fc2be09. Users should update to these fixed versions to remediate the vulnerability.

Description

A heap-buffer-overflow vulnerability exists in the ndpi_search_l2tp function of the ndpi product, as reported by OSS-Fuzz. This flaw involves an out-of-bounds read on the heap memory during packet processing.

References

Community reviews

Loading reviews…