In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15474
Reference (s):
- https://github.com/ntop/nDPI/commit/23594f036536468072198a57c59b6e9d63caf6ce