High
Security advisory
ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-36082
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:45 UTC · Revision 1
Source evidence
ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
osv:CVE-2021-36082
Complete source record
{
"id": "e0c08bae8534ea610c2568ab120c298dc7cd6c306c9177162ca682c09e92d6ce",
"url": "https://osv.dev/vulnerability/CVE-2021-36082",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-36082",
"summary": "ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.",
"evidence": "osv:CVE-2021-36082",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2021-36082",
"aliases": [
"CVE-2021-36082"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/ntop/ndpi",
"type": "GIT",
"events": [
{
"introduced": "64929a75e0a7a60d864bd25a9fd97fdf9ac892a2"
},
{
"last_affected": "64929a75e0a7a60d864bd25a9fd97fdf9ac892a2"
},
{
"fixed": "1ec621c85b9411cc611652fd57a892cfef478af3"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:ntop:ndpi:3.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.4"
},
{
"last_affected": "3.4"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "1ec621c85b9411cc611652fd57a892cfef478af3"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"3.4"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-36082.json",
"vanir_signatures": [
{
"id": "CVE-2021-36082-0ef97e0f",
"digest": {
"length": 758,
"function_hash": "302859875256664286226638523269138364431"
},
"source": "https://github.com/ntop/ndpi/commit/1ec621c85b9411cc611652fd57a892cfef478af3",
"target": {
"file": "src/lib/protocols/netbios.c",
"function": "ndpi_netbios_name_interpret"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-36082-6f379434",
"digest": {
"threshold": 0.9,
"line_hashes": [
"283285741691081614073684166098376823804",
"190422609488824348763456446657549809087",
"29865031034892981345129101361358677315",
"43684388212785616421314117726959667143",
"302097630842734779183807666297333094091",
"38598527672163028968547299404012524258",
"329753652566897716863181266048848301409",
"21268663557253755254920215319728393570",
"244422327276923352932327439479383557696",
"207921080578549301239642766647035237831",
"58893800896607668872476623799361005970",
"275422212797821282488771469457978426013",
"159959277189008559366896995343663327680",
"265853024499135991219794651391573022954",
"285692154626788011360669358653997777911",
"66928221849196613927809394589402010934",
"45964735516037415977318779435850754775",
"51178598113062849075198239399821097758",
"330394963256572404299176478509430897947",
"160674689939810966270154381817585874608",
"259268077522815151047063469966451106260",
"280334077618436250983947778341381732440",
"257412689862992087545053588682041756577",
"318083609610401959667833608422610049613",
"309812486040215203763839339071065032490",
"41520219025630646301310345416948027529",
"75465516785154960852510383159070501062",
"58100940850657514519449182490322318798",
"252110335941039765075592875400745900812",
"51407593054553760286480082973700760855",
"216769654216211786156122429316044956274",
"150697918068094379758688770642587380504",
"36279729678887605568430952023268193821",
"129019470795228794175777620312920332628",
"158008358202997966142742743538762405909",
"115720650068195905742780824482021156668",
"51407593054553760286480082973700760855",
"300275965938171584385619919830840743675",
"239225698138344605166386165504982299916",
"289762993025206709576255902386117210401",
"171208261723510209159260858395032953597",
"338998004147545300942138600459534915410",
"322658238603977047716369349843388287656",
"51407593054553760286480082973700760855",
"75497389352015957792228046339090665851",
"18688632161639187432424494224565155827",
"317474783919217660955762280009344241960",
"130396738490288601582201946447974125098",
"157498100904595441077674871070490337196",
"90287096384632413821644480278258022533",
"25885811904529883748937752505232882518",
"163088973298841930022455502117864275944",
"201432481730589165366163241716992664893",
"176909143950007632262210633798052100846"
]
},
"source": "https://github.com/ntop/ndpi/commit/1ec621c85b9411cc611652fd57a892cfef478af3",
"target": {
"file": "src/lib/protocols/tls.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-36082-dd04ae82",
"digest": {
"length": 25514,
"function_hash": "296183314519124945305659869962697730796"
},
"source": "https://github.com/ntop/ndpi/commit/1ec621c85b9411cc611652fd57a892cfef478af3",
"target": {
"file": "src/lib/protocols/tls.c",
"function": "processClientServerHello"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-36082-e3552928",
"digest": {
"threshold": 0.9,
"line_hashes": [
"33716765348600117403750162508772891282",
"256243292410185589768547227138080496690",
"126610943620910384459492188773966927618",
"59423376683474255142434169091535584325"
]
},
"source": "https://github.com/ntop/ndpi/commit/1ec621c85b9411cc611652fd57a892cfef478af3",
"target": {
"file": "src/lib/protocols/netbios.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:25:21Z"
}
}
],
"modified": "2026-10-20T14:25:21.143880125Z",
"provider": "osv",
"references": [
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2021-304.yaml",
"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30393",
"https://github.com/ntop/nDPI/commit/1ec621c85b9411cc611652fd57a892cfef478af3"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2021-36082",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388974,
"published_at": "2021-07-01T03:15:08.653+00:00"
}