https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 04:53:07 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-116744 <p>ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.</p> <p>ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116744 https://db.gcve.eu/vuln/ghsa-gpg3-522v-2frf <p>ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.</p> <p>ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.</p> https://db.gcve.eu/vuln/ghsa-gpg3-522v-2frf https://db.gcve.eu/vuln/ubuntu-cve-2026-116744 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ndpi, Ubuntu:18.04:LTS: ndpi, Ubuntu:20.04:LTS: ndpi, Ubuntu:22.04:LTS: ndpi, Ubuntu:24.04:LTS: ndpi, Ubuntu:26.10: ndpi, Ubuntu:26.04:LTS: ndpi</p> <p>ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ndpi, Ubuntu:18.04:LTS: ndpi, Ubuntu:20.04:LTS: ndpi, Ubuntu:22.04:LTS: ndpi, Ubuntu:24.04:LTS: ndpi, Ubuntu:26.10: ndpi, Ubuntu:26.04:LTS: ndpi</p> <p>ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-116744