CVE-2026-116744: ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn() in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.
Affected Software
Event History
Frequently Asked Questions
What traffic must an attacker be able to send to trigger the issue?
The attacker must be able to send crafted short UDP datagrams on flows that have already been classified as SoftEther. The issue occurs when the SoftEther dissector processes the hostname field in those packets.
What is the practical impact described for a successful exploit?
A successful trigger causes an out-of-bounds read beyond the packet payload buffer. The provided severity vector indicates availability impact only, with no stated confidentiality or integrity impact.
Which versions are affected?
The affected range is ntop nDPI through version 6.0. The provided data does not identify a fixed release version.