CVE-2017-12464

ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service NULL pointer dereference via vectors involving the keyfile variable...

CVE-2017-12463

Memory leak in the ccnlappRX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption via vectors involving an envelopes structure pointer when the packet format is unknown...

CVE-2017-12467

Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption by leveraging failure to allocate memory for the comp or complen structure member...

CVE-2017-12473

Summary: The CVE-2017-12473 entry concerns CCN-lite. The affected component is the function ccnl_ccntlv_bytes2pkt in CCN-lite, where processing packets can be coerced by input with “wrong L values.” The vulnerability allows context-dependent attackers to cause a denial of service via a crash. The...

CVE-2017-12469

CVE-2017-12469 describes a buffer overflow in CCN-lite’s file util/ccnl-common.c affecting versions prior to 2.00 . The root cause is improper memory allocation, enabling context-dependent attackers to cause unspecified impact. Several connected sources corroborate: CCN-lite before 2.00 (and resp...

CVE-2017-12470

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...

CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12412

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

CVE-2017-12412

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

CVE-2017-12465

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...

CVE-2017-12471

The CVE-2017-12471 issue concerns CCN-lite's cnb_parse_lev function. Multiple connected sources describe a vulnerability in CCN-lite versions prior to 2.00 where failure to check for out-of-bounds conditions enables an invalid read in the hexdump path, reported as a denial-of-service risk. Techni...

CVE-2017-12473

ccnlccntlvbytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service application crash via vectors involving packets with "wrong L values."...

CVE-2017-12469: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-12468: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...

PT-2018-5409

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to an integer overflow in the ndn parse sequence function, allowing context-dependent attackers to have an unspecified impact. This is achieved via vectors involving the typ an...

PT-2018-5403

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue allows context-dependent attackers to cause a denial of service, specifically a NULL pointer dereference, via vectors involving the keyfile variable. Recommendations: For versions prior t...

PT-2018-5402

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to a memory leak in the ccnl app RX function, which can be exploited by context-dependent attackers to cause a denial of service due to memory consumption. This occurs when an...

CVE-2017-12472: NULL Pointer Dereference

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

PT-2018-5411

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to missing NULL pointer checks after ccnl malloc in ccnl-ext-mgmt.c, which could allow context-dependent attackers to have an unspecified impact. Recommendations: For versions...

CVE-2017-12465: Integer Overflow or Wraparound

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...