CVE-2026-116744 Details
Description
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.
A memory-safety issue has been identified in the ntop nDPI library, specifically in version 6.0 and prior, within the SoftEther protocol dissector. The vulnerability arises from an out-of-bounds read in the function 'dissect_softether_host_fqdn' in 'softether.c'. This issue occurs because the function compares the 'host_name' using the number of bytes consumed by the parser, rather than the actual data length. As a result, remote attackers can exploit this by sending crafted short UDP packets on flows that have already been classified as SoftEther, causing the 'strncmp' function to read beyond the intended buffer limit.
Users can update to nDPI version 6.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 31, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ntop/nDPI | [email protected] | Source CodeVendor |
| https://github.com/ntop/nDPI/blob/6.0/src/lib/protocols/softether.c#L203 | [email protected] | Source CodeVendor |
| https://github.com/ntop/nDPI/commit/ca9d819151606377ac53305583fe819748c69be2 | [email protected] | Source CodeVendor |
| https://github.com/ntop/nDPI/issues/3291 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/ntop/nDPI/pull/3298 | [email protected] | Issue TrackingVendor |
| https://hackmd.io/@haindpwn/ndpi-softether-host-fqdn-strncmp-oob-read | [email protected] | ExploitTechnical Analysis |
| https://www.vulncheck.com/advisories/ntop-ndpi-through-6.0-out-of-bounds-read-in-softether-dissector | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ntop nDPI | <= 6.0 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 31, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |