Threats tagged 'ghsa-gpg3-522v-2frf'

ntop nDPI versions through 6.0 have an out-of-bounds read vulnerability in the dissect_softether_host_fqdn() function within softether.c. This flaw arises because the function compares host_name using the consumed byte count rather than the actual data length. An attacker can exploit this by sending crafted short UDP datagrams on already-classified SoftEther flows, causing the strncmp function to read beyond the packet payload buffer, potentially leading to a denial of service.