CVE-2020-15471 is a critical heap-based buffer over-read vulnerability (CWE-125) in nDPI versions through 3.2, specifically within the ndpi_parse_packet_line_info function in lib/ndpi_main.c, affecting ntop ndpi products. With a CVSS score of 9.1, this vulnerability is remotely exploitable with low attack complexity and no user interaction, potentially leading to high confidentiality impact and high availability impact. Despite its critical severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.2CPE matchmatch criteria | cpe:2.3:a:ntop:ndpi:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.