Known Vulnerabilities for Ndpi by Ntop
Listed below are 9 of the newest known vulnerabilities associated with "Ndpi" by "Ntop".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88357 json | nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-86098 json | ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that write... | Not Provided | 2026-09-04 | 2026-09-14 |
| CVE-2026-54604 json | OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the i... | Not Provided | 2026-09-17 | 2026-09-18 |
| CVE-2021-36082 json | ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. | 8.8 - HIGH | 2021-07-01 | 2021-07-08 |
| CVE-2020-15476 json | In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/o... | 7.5 - HIGH | 2020-07-01 | 2022-09-09 |
| CVE-2020-15475 json | In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-fr... | 9.8 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-15474 json | In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c. | 9.8 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-15473 json | In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/proto... | 9.1 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-15472 json | In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/... | 9.1 - CRITICAL | 2020-07-01 | 2022-09-09 |
| CVE-2020-15471 json | In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in... | 9.1 - CRITICAL | 2020-07-01 | 2020-07-06 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ntop | Ndpi | 3.2 | |||
| Application | Ntop | Ndpi | 3.0 | |||
| Application | Ntop | Ndpi | 2.8 | |||
| Application | Ntop | Ndpi | 2.6 | |||
| Application | Ntop | Ndpi | 2.4 | |||
| Application | Ntop | Ndpi | 2.2 | |||
| Application | Ntop | Ndpi | 2.0 | |||
| Application | Ntop | Ndpi | 1.8 | |||
| Application | Ntop | Ndpi | 1.7 | |||
| Application | Ntop | Ndpi | 1.6 |