Skip to main content
VulnerabilityPublished

Ndpi: UNKNOWN WRITE

Affects ndpiSource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Patch
Available – fixed in b76a732f8a665687be918d8cb2ebaede9e2f040d, 211d26151d31bd4ba344248205e1aa695782fbd1

Data as of 27 Oct 2026, 01:07 UTC

What to do

Upgrade ndpi to b76a732f8a665687be918d8cb2ebaede9e2f040d or 211d26151d31bd4ba344248205e1aa695782fbd1.

Affected software

ProductAffectedFixed in
OSS-Fuzzndpipkg:generic/ndpiOther threatsAffected
  • >=2255d82d2df361c164412cfe3ba08e8598b0270c <b76a732f8a665687be918d8cb2ebaede9e2f040d
  • <211d26151d31bd4ba344248205e1aa695782fbd1
Fixed in
  • b76a732f8a665687be918d8cb2ebaede9e2f040d
  • 211d26151d31bd4ba344248205e1aa695782fbd1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and has been applied in the specified commits. Users should update to the fixed versions referenced by commit hashes b76a732f8a665687be918d8cb2ebaede9e2f040d or 211d26151d31bd4ba344248205e1aa695782fbd1 to remediate this issue.

Description

A vulnerability in ndpi was identified by OSS-Fuzz involving an unknown write error in the function ___interceptor_strncpy, leading to a crash. The issue was observed during SSH TCP search processing. Fixes have been applied in specific commits.

References

Community reviews

Loading reviews…