CVE-2020-25340

Published: Feb 16, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a memory leak that may result in a local denial of service (DoS).

Affected (1)

Products: Nfstream: Nfstream

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nfstream Nfstream	Version 5.2.0

Related CWEs

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://github.com/ntop/nDPI/issues/994

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/ntop/nDPI/issues/994

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.