CVE-2026-116744

MEDIUM 5.3

ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.

CWE	CWE-125
Vendor	ntop
Product	ndpi
Published	Oct 26, 2026

Stay Ahead of the Next One

Get instant alerts for ntop ndpi

Be the first to know when new medium vulnerabilities affecting ntop ndpi are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected Versions

ntop / nDPI

0 ≤ 6.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/ntop/nDPI/pull/3298 github.com: https://github.com/ntop/nDPI/commit/ca9d819151606377ac53305583fe819748c69be2 github.com: https://github.com/ntop/nDPI github.com: https://github.com/ntop/nDPI/blob/6.0/src/lib/protocols/softether.c#L203 hackmd.io: https://hackmd.io/@haindpwn/ndpi-softether-host-fqdn-strncmp-oob-read github.com: https://github.com/ntop/nDPI/issues/3291 vulncheck.com: https://www.vulncheck.com/advisories/ntop-ndpi-through-6.0-out-of-bounds-read-in-softether-dissector

Credits

HaiND from the Post and Telecommunication Institute of Technology IvanNardi