CVE-2017-12470

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...

CVE-2017-12412

CCN-lite contains an infinite recursion/stack overflow vulnerability in the ccn-lite-ccnb2xml component prior to version 2.0.0 when processing a crafted file. This affects CCN-lite up to 2.0.0; upgrading to 2.0.0 or later is the documented fix. The issue is reported across multiple sources (NVD/C...

CVE-2017-12472

CVE-2017-12472 affects the CCN-lite project, specifically the file ccnl-ext-mgmt.c in versions prior to 2.00. The root cause is missing NULL pointer checks after ccnl_malloc , which can let context-dependent attackers induce an unspecified impact via network interactions. This vulnerability is do...

CVE-2017-12464

ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service NULL pointer dereference via vectors involving the keyfile variable...

CVE-2017-12469

CVE-2017-12469 describes a buffer overflow in CCN-lite’s file util/ccnl-common.c affecting versions prior to 2.00 . The root cause is improper memory allocation, enabling context-dependent attackers to cause unspecified impact. Several connected sources corroborate: CCN-lite before 2.00 (and resp...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

Type confusion

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

CVE-2018-6480 describes a type confusion in CCN-lite 2. The bug occurs in ccnl_fwd_handleInterest, which assumes the union member s is of type ccnl_pktdetail_ndntlv_s; if the actual type is ccnl_pktdetail_ccntlv_s or ccnl_pktdetail_iottlv_s, the code may access uninitialized memory or data that i...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...