CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-12471

The CVE-2017-12471 issue concerns CCN-lite's cnb_parse_lev function. Multiple connected sources describe a vulnerability in CCN-lite versions prior to 2.00 where failure to check for out-of-bounds conditions enables an invalid read in the hexdump path, reported as a denial-of-service risk. Techni...

CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

CVE-2017-12468

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...

CVE-2017-12465

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...

CVE-2017-12465

CCN-lite before 2.00 contains integer overflow flaws in iottlv_parse_sequence (vallen) and in localrpc_parse (typ, vallen, i), enabling context-dependent attackers to cause unspecified impact. Patch/upgrade to 2.0.0 is implied by the CNVD entry; no explicit exploit details or attacker workflow ar...

CVE-2017-12464

CCN-lite: The vulnerability CVE-2017-12464 affects ccn-lite-valid.c in CCN-lite before 2.00, where context-dependent attackers can cause a denial of service via a NULL pointer dereference involving the keyfile variable. Impact is partial availability (DoS). Remediation in publicly cited sources i...

PT-2018-5406

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A memory leak issue exists, allowing context-dependent attackers to cause a denial of service by consuming memory. This is due to the failure to allocate memory for the comp or complen structure...

PT-2018-5405

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue allows context-dependent attackers to have an unspecified impact via vectors related to ssl halen when running ccn-lite-sim, triggering an out-of-bounds access. Recommendations: For...

CVE-2017-12466: Improper Restriction of Operations within the Bounds of a Memory Buffer

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12470: Integer Overflow or Wraparound

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...

CVE-2017-12469: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-12468: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...

PT-2018-5410

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to the cnb parse lev function, which fails to check for out-of-bounds conditions. This failure triggers an invalid read in the hexdump function, allowing context-dependent...

PT-2018-5399

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.0.0 Description: The issue allows context-dependent attackers to have an unspecified impact via a crafted file. This crafted file triggers infinite recursion and a stack overflow. Recommendations: For versions pri...

PT-2018-5404

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue involves multiple integer overflows that can be exploited by context-dependent attackers. The overflows occur in the iottlv parse sequence function, which involves the vallen variable, an...

PT-2018-5403

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue allows context-dependent attackers to cause a denial of service, specifically a NULL pointer dereference, via vectors involving the keyfile variable. Recommendations: For versions prior t...

PT-2018-5408

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A buffer overflow issue exists due to incorrect memory allocation in util/ccnl-common.c, allowing context-dependent attackers to have an unspecified impact. Recommendations: For versions prior to...