CVE-2020-11940

In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH…

published April 23, 2020

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH protocol messages on a network segment monitored by nDPI's library.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01324 · 70.7th percentile
Published
2020-04-23T14:20Z
EPSS history
Timeline
  • 23 APR 14:20Z
    In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH…
    cvelistv5