PT-2018-5408

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A buffer overflow issue exists due to incorrect memory allocation in util/ccnl-common.c, allowing context-dependent attackers to have an unspecified impact. Recommendations: For versions prior to...

CVE-2017-12470: Integer Overflow or Wraparound

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...

PT-2018-5406

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A memory leak issue exists, allowing context-dependent attackers to cause a denial of service by consuming memory. This is due to the failure to allocate memory for the comp or complen structure...

PT-2018-5410

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to the cnb parse lev function, which fails to check for out-of-bounds conditions. This failure triggers an invalid read in the hexdump function, allowing context-dependent...

CVE-2017-12466: Improper Restriction of Operations within the Bounds of a Memory Buffer

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

PT-2018-5412

Name of the Vulnerable Software and Affected Versions: CCN-lite affected versions not specified Description: The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash. This can be achieved via vectors involving packets with incorrect L values,...

PT-2018-5399

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.0.0 Description: The issue allows context-dependent attackers to have an unspecified impact via a crafted file. This crafted file triggers infinite recursion and a stack overflow. Recommendations: For versions pri...

CVE-2017-12412: Loop with Unreachable Exit Condition

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

PT-2018-5405

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue allows context-dependent attackers to have an unspecified impact via vectors related to ssl halen when running ccn-lite-sim, triggering an out-of-bounds access. Recommendations: For...

Type confusion

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

CVE-2018-6480 describes a type confusion in CCN-lite 2. The bug occurs in ccnl_fwd_handleInterest, which assumes the union member s is of type ccnl_pktdetail_ndntlv_s; if the actual type is ccnl_pktdetail_ccntlv_s or ccnl_pktdetail_iottlv_s, the code may access uninitialized memory or data that i...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

PT-2018-17575

Name of the Vulnerable Software and Affected Versions CCN-lite version 2 Description A type confusion issue was discovered, leading to a memory access violation and a failure of the nonce feature, which is used for loop prevention. The ccnl fwd handleInterest function assumes a specific type for...

CVE-2018-6480: Incorrect Type Conversion or Cast

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

Code injection

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

CVE-2018-5749

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

CVE-2018-5749: Unrestricted Upload of File with Dangerous Type

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...