7916 matches found
CVE-2017-12471
The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...
CVE-2017-12472
ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...
CVE-2017-12468
CCN-lite: The CVE-2017-12468 issue is a buffer overflow in ccn-lite-ccnb2xml.c affecting CCN-lite before version 2.00. Exploitation is via vectors involving the vallen and len variables, allowing context-dependent attackers to cause unspecified impact. The connected documents confirm the vulnerab...
CVE-2017-12473
Summary: The CVE-2017-12473 entry concerns CCN-lite. The affected component is the function ccnl_ccntlv_bytes2pkt in CCN-lite, where processing packets can be coerced by input with “wrong L values.” The vulnerability allows context-dependent attackers to cause a denial of service via a crash. The...
CVE-2017-12473
ccnlccntlvbytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service application crash via vectors involving packets with "wrong L values."...
CVE-2017-12464
CCN-lite: The vulnerability CVE-2017-12464 affects ccn-lite-valid.c in CCN-lite before 2.00, where context-dependent attackers can cause a denial of service via a NULL pointer dereference involving the keyfile variable. Impact is partial availability (DoS). Remediation in publicly cited sources i...
CVE-2017-12463
Memory leak in the ccnlappRX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption via vectors involving an envelopes structure pointer when the packet format is unknown...
CVE-2017-12471
The CVE-2017-12471 issue concerns CCN-lite's cnb_parse_lev function. Multiple connected sources describe a vulnerability in CCN-lite versions prior to 2.00 where failure to check for out-of-bounds conditions enables an invalid read in the hexdump path, reported as a denial-of-service risk. Techni...
CVE-2017-12466
CCN-lite before 2.00 contains an out-of-bounds access vulnerability in the ssl_halen-related path when running ccn-lite-sim. Affected component: CCN-lite (ccn-lite-sim). Root cause: out-of-bounds access due to ssl_halen handling in versions prior to 2.0.0. Impact is described as unspecified in th...
CVE-2017-12467
CCN-lite is affected by a memory leak vulnerability (CVE-2017-12467) present in versions before 2.00. The issue lets context-dependent attackers cause denial of service through memory exhaustion by a failure to allocate memory for the comp or complen structure members. The vulnerability is docume...
CVE-2017-12463
CVE-2017-12463 concerns CCN-lite prior to 2.0.0, where a memory leak in the function ccnl_app_RX (ccnl-uapi.c) can be triggered via an envelope_s pointer when the packet format is unknown. This leads to a denial of service through memory consumption. Documents consistently identify the affected s...
CVE-2017-12465
CCN-lite before 2.00 contains integer overflow flaws in iottlv_parse_sequence (vallen) and in localrpc_parse (typ, vallen, i), enabling context-dependent attackers to cause unspecified impact. Patch/upgrade to 2.0.0 is implied by the CNVD entry; no explicit exploit details or attacker workflow ar...
CVE-2017-12465
Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...
CVE-2017-12464
ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service NULL pointer dereference via vectors involving the keyfile variable...
CVE-2017-12469
CVE-2017-12469 describes a buffer overflow in CCN-lite’s file util/ccnl-common.c affecting versions prior to 2.00 . The root cause is improper memory allocation, enabling context-dependent attackers to cause unspecified impact. Several connected sources corroborate: CCN-lite before 2.00 (and resp...
CVE-2017-12469
Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...
CVE-2017-12467
Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption by leveraging failure to allocate memory for the comp or complen structure member...
CVE-2017-12472
CVE-2017-12472 affects the CCN-lite project, specifically the file ccnl-ext-mgmt.c in versions prior to 2.00. The root cause is missing NULL pointer checks after ccnl_malloc , which can let context-dependent attackers induce an unspecified impact via network interactions. This vulnerability is do...
CVE-2017-12412
CCN-lite contains an infinite recursion/stack overflow vulnerability in the ccn-lite-ccnb2xml component prior to version 2.0.0 when processing a crafted file. This affects CCN-lite up to 2.0.0; upgrading to 2.0.0 or later is the documented fix. The issue is reported across multiple sources (NVD/C...