---
id: CVE-2026-116744
title: ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector
summary: >-
  ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in
  dissect_softether_host_fqdn() in softether.c that compares host_name using the
  consumed byte count instead of data length. Remote attackers can send crafted
  short UDP …
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-125
vendor: ntop
product: nDPI
affected:
  - nDPI <= 6.0
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T21:52:42.875Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116744'
references:
  - url: 'https://github.com/ntop/nDPI/pull/3298'
    label: 'Pull Request #3298'
  - url: >-
      https://github.com/ntop/nDPI/commit/ca9d819151606377ac53305583fe819748c69be2
    label: Patch Commit
  - url: 'https://github.com/ntop/nDPI'
  - url: 'https://github.com/ntop/nDPI/blob/6.0/src/lib/protocols/softether.c#L203'
  - url: 'https://hackmd.io/@haindpwn/ndpi-softether-host-fqdn-strncmp-oob-read'
  - url: 'https://github.com/ntop/nDPI/issues/3291'
  - url: >-
      https://www.vulncheck.com/advisories/ntop-ndpi-through-6.0-out-of-bounds-read-in-softether-dissector
    label: >-
      VulnCheck Advisory: ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther
      Dissector
tags:
  - cve.org
epss: 0.00431
epssPercentile: 0.37198
ingestedAt: '2026-10-27T16:11:59.125Z'
---

## Overview

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.

## Affected

- `nDPI <= 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.