CVE-2017-12412

CCN-lite contains an infinite recursion/stack overflow vulnerability in the ccn-lite-ccnb2xml component prior to version 2.0.0 when processing a crafted file. This affects CCN-lite up to 2.0.0; upgrading to 2.0.0 or later is the documented fix. The issue is reported across multiple sources (NVD/C...

CVE-2017-12469

CVE-2017-12469 describes a buffer overflow in CCN-lite’s file util/ccnl-common.c affecting versions prior to 2.00 . The root cause is improper memory allocation, enabling context-dependent attackers to cause unspecified impact. Several connected sources corroborate: CCN-lite before 2.00 (and resp...

CVE-2017-12464

ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service NULL pointer dereference via vectors involving the keyfile variable...

CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12465

CCN-lite before 2.00 contains integer overflow flaws in iottlv_parse_sequence (vallen) and in localrpc_parse (typ, vallen, i), enabling context-dependent attackers to cause unspecified impact. Patch/upgrade to 2.0.0 is implied by the CNVD entry; no explicit exploit details or attacker workflow ar...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

Type confusion

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

CVE-2018-6480 describes a type confusion in CCN-lite 2. The bug occurs in ccnl_fwd_handleInterest, which assumes the union member s is of type ccnl_pktdetail_ndntlv_s; if the actual type is ccnl_pktdetail_ccntlv_s or ccnl_pktdetail_iottlv_s, the code may access uninitialized memory or data that i...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...