Skip to content

CVE-2020-15473

CVE-2020-15473

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.

CVSS 9.1 · Critical · EPSS 1.3% · Fix available

Published: 2020-07-01T10:54:17.000Z
Updated: 2026-01-26T16:34:17.637Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
ndpi Debian:12
Affected ranges
- ECOSYSTEM: < 3.4-1
Update to 3.4-1
ndpi Debian:13
Affected ranges
- ECOSYSTEM: < 3.4-1
Update to 3.4-1
ndpi Debian:14
Affected ranges
- ECOSYSTEM: < 3.4-1
Update to 3.4-1

Original sources

Check your server →