UBUNTU-CVE-2026-116744: Medium severity ubuntu/ndpi vulnerability
Published Oct 26, 2026
·Updated
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn() in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.
Affected Software
7 affected components
ubuntu/ndpi*
ubuntu/ndpi*
ubuntu/ndpi*
ubuntu/ndpi*
ubuntu/ndpi*
ubuntu/ndpi*
ubuntu/ndpi*
Event History
Oct 26, 2026
CVE Published
via OSV·10:16 PM
Data Sourced
via OSV·10:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What traffic must an attacker be able to send to trigger this issue?
The attacker must be able to send crafted short UDP datagrams on flows that nDPI has already classified as SoftEther. No privileges or user interaction are required.
2
What is the expected impact of a successful attempt?
The flawed comparison can cause strncmp to read beyond the packet payload buffer. The reported impact is limited to availability; no confidentiality or integrity impact is stated.