CVE-2020-11939 Integer overflow in n/a
Integer overflows in nDPI's SSH dissector allow remote attackers to achieve full Remote Code Execution via controlled heap overflows.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-11939?
CVE-2020-11939 is a critical vulnerability in n/a, published on 23 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in concat_hash_string in ssh.c. Due to the granular nature of the overflow primitive and the ability to control both the contents and layout of the nDPI library's heap memory through remote input, this vulnerability may be abused to achieve full Remote Code Execution against any network inspection stack that is linked against nDPI and uses it to perform network traffic analysis.
Which versions are affected by CVE-2020-11939?
It affects 1 product.
Products include Ntop Ndpi.
How do I fix CVE-2020-11939?
Upgrade to a fixed version.
Is CVE-2020-11939 being exploited?
There is no known exploitation of CVE-2020-11939 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2020-11939, GHSA-x59q-66q3-mmf8.