CVE-2020-15475: Use After Free
Published Jul 1, 2020
·Updated
In nDPI through 3.2, ndpiresetpacketlineinfo in lib/ndpimain.c omits certain reinitialization, leading to a use-after-free.
Affected Software
1 affected component
ntop nDPI<=3.2
Remediation
Event History
Jul 1, 2020
CVE Published
via MITRE·10:53 AM
Data Sourced
via MITRE·10:53 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-15475?
CVE-2020-15475 has a severity rating of medium, indicating a moderate risk associated with the use-after-free vulnerability.
2
How do I fix CVE-2020-15475?
To fix CVE-2020-15475, update nDPI to version 3.2.1 or later, which addresses the reinitialization issue.
3
Which versions of nDPI are affected by CVE-2020-15475?
CVE-2020-15475 affects nDPI versions up to and including 3.2.
4
What is a use-after-free vulnerability in the context of CVE-2020-15475?
In the context of CVE-2020-15475, a use-after-free vulnerability occurs when the application attempts to use memory after it has already been freed, potentially leading to arbitrary code execution.
5
What impact could CVE-2020-15475 have on affected systems?
CVE-2020-15475 could allow attackers to exploit the use-after-free condition to execute arbitrary code on affected systems.