OSV-2020-1112.yaml

id: OSV-2020-1112
summary: Heap-buffer-overflow in getNameLength
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18757

  ```
  Crash type: Heap-buffer-overflow READ 1
  Crash state:
  getNameLength
  getNameLength
  ndpi_search_dns
  ```
modified: '2022-04-13T03:04:35.923758Z'
published: '2020-07-22T21:49:48.124030Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18757
affected:
- package:
    name: ndpi
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/ntop/nDPI.git
    events:
    - introduced: e695dd6eade754b2d50bdf297ca8bdc4105f93ff
    - fixed: c223bb1f10068c00aaf9e9c96709dc3984a969cb
  ecosystem_specific:
    introduced_range: unknown:e695dd6eade754b2d50bdf297ca8bdc4105f93ff
    severity: MEDIUM
  versions: []