CVE-2020-11939

In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in concat_hash_string in ssh.c. Due to the granular nature of the overflow primitive and the ability to control both the contents and layout of the nDPI library's heap memory through remote input, this vulnerability may be abused to achieve full Remote Code Execution against any network inspection stack that is linked against nDPI and uses it to perform network traffic analysis.

• CWE-190
• CWE-787

• https://github.com/ntop/nDPI/commit/7ce478a58b4dd29a8d1e6f4e9df2f778613d9202Patch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2020-051_052-ntop-ndpiExploit, Third Party Advisory
• https://github.com/ntop/nDPI/commit/7ce478a58b4dd29a8d1e6f4e9df2f778613d9202Patch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2020-051_052-ntop-ndpiExploit, Third Party Advisory

Published

Apr 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11933cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu …6.8
• CVE-2020-11934It was discovered that snapctl user-open allowed altering th…5.9
• CVE-2020-11935It was discovered that aufs improperly managed inode referen…5.5
• CVE-2020-11936gdbus setgid privilege escalation3.1
• CVE-2020-11937In whoopsie, parse_report() from whoopsie.c allows a local a…5.5
• CVE-2020-11938In JetBrains TeamCity 2018.2 through 2019.2.1, a project adm…4.9
• CVE-2020-1194A denial of service vulnerability exists when Windows Regist…5.5
• CVE-2020-11940In nDPI through 3.2 Stable, an out-of-bounds read in concat_…7.5
• CVE-2020-11941An issue was discovered in Open-AudIT 3.2.2. There is OS Com…8.8
• CVE-2020-11942An issue was discovered in Open-AudIT 3.2.2. There are Multi…9.8
• CVE-2020-11943An issue was discovered in Open-AudIT 3.2.2. There is Arbitr…8.8
• CVE-2020-11944Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS …6.1