{"id":"CVE-2026-88357","aliases":["DEBIAN-CVE-2026-88357","EUVD-2026-86285","GHSA-hjcq-5876-2cpr","UBUNTU-CVE-2026-88357"],"status":"published","title":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization...","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00597,"percentile":0.49021,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1335"],"published":"2026-09-24T00:00:00Z","modified":"2026-10-28T11:19:18Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2","4.2-2.1","4.2-2.1~exp1"]},{"source":"osv","ecosystem":"Debian:13","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2.1"]},{"source":"osv","ecosystem":"Debian:14","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.0-1","1.6-1","1.7.1~git20151130.6f3d5a7-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8-1","2.2-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.6-4","2.6-5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0-4","4.2-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2","4.2-2.1","4.2-2.1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2.1build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ndpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-2.1build1","4.2-2.1build2"]}],"references":[{"url":"https://github.com/ntop/nDPI/issues/3213","tags":["exploit","report"]},{"url":"https://github.com/utoni/nDPI/commit/6ce1280c52ed52a97332c3fe58fd2b47b867ec6e","tags":["fix"]},{"url":"https://github.com/utoni/nDPI/commit/8fc3b439920021a77165f8aee4f81b25bc88629e","tags":["fix"]},{"url":"https://github.com/utoni/nDPI/commit/694231bb43ff21f452fbc2b53fcf6cdc9a99f75f","tags":["fix"]},{"url":"https://github.com/utoni/nDPI/commit/6698f14bf6025394a537fe23f413cf79e9d13594","tags":["fix"]},{"url":"https://github.com/ntop/nDPI/pull/3231","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88357","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hjcq-5876-2cpr"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88357.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-88357","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-88357","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-88357","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-88357","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T00:00:00Z","modified":"2026-09-24T17:53:09.601Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-1335"],"updated_at":"2026-11-02T13:41:53.237769Z"}],"euvd":[{"id":"EUVD-2026-86285","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T00:00:00Z","modified":"2026-09-24T17:53:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:56.686358Z"}],"ghsa":[{"id":"GHSA-hjcq-5876-2cpr","title":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization...","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T18:31:19Z","modified":"2026-09-24T18:31:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1335"],"updated_at":"2026-11-02T15:12:22.921703Z"}],"nvd":[{"id":"CVE-2026-88357","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T16:17:12.957Z","modified":"2026-09-24T21:08:55.03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1335"],"updated_at":"2026-11-02T14:12:51.036099Z"}],"osv":[{"id":"CVE-2026-88357","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T00:00:00Z","modified":"2026-10-28T11:19:18.560590659Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:19.210277Z"},{"id":"DEBIAN-CVE-2026-88357","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T16:17:12.957Z","modified":"2026-09-26T19:00:07.63716514Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"UBUNTU-CVE-2026-88357","description":"nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.","status":"published","published":"2026-09-24T16:17:00Z","modified":"2026-10-17T13:01:15.555185263Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:24.828975Z"}]}}