PT-2025-5619 · Ndpi · Ndpi

Published 2025-02-03 · Updated 2025-02-08 · CVE-2025-25066

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: nDPI versions 4.12 and earlier

Description: The issue is a potential stack-based buffer overflow in the ndpi address cache restore function located in lib/ndpi cache.c. This could potentially lead to exploitation.

Recommendations: For nDPI versions 4.12 and earlier, as a temporary workaround, consider disabling the ndpi address cache restore function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-25066

Affected Products

Ndpi

References · 19

• https://github.com/ntop/nDPI/commit/678697b5eb6c3caa5dd5f8cccfe9eed8d13b94bb · Patch
• https://cve.org/CVERecord?id=CVE-2025-25066 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-25066 · Security Note
• https://ubuntu.com/security/CVE-2025-25066 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-25066 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-25066 · Vendor Advisory
• https://github.com/ntop/nDPI · Note
• https://twitter.com/BursaMatus/status/1886520297790042469 · Twitter Post
• https://twitter.com/cracbot/status/1888181081926750229 · Twitter Post
• https://twitter.com/BursaMatus/status/1886550477355004027 · Twitter Post
• https://twitter.com/BursaMatus/status/1886429682402299933 · Twitter Post
• https://twitter.com/CVEnew/status/1886298327471337790 · Twitter Post
• https://twitter.com/cracbot/status/1887736530590146807 · Twitter Post
• https://t.me/cvedetector/17055 · Telegram Post
• https://twitter.com/WhalersLtd/status/1886335990903541990 · Twitter Post