PT-2018-5409

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to an integer overflow in the ndn parse sequence function, allowing context-dependent attackers to have an unspecified impact. This is achieved via vectors involving the typ an...

PT-2018-5402

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to a memory leak in the ccnl app RX function, which can be exploited by context-dependent attackers to cause a denial of service due to memory consumption. This occurs when an...

PT-2018-5412

Name of the Vulnerable Software and Affected Versions: CCN-lite affected versions not specified Description: The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash. This can be achieved via vectors involving packets with incorrect L values,...

PT-2018-5411

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to missing NULL pointer checks after ccnl malloc in ccnl-ext-mgmt.c, which could allow context-dependent attackers to have an unspecified impact. Recommendations: For versions...

CVE-2017-12465: Integer Overflow or Wraparound

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...

CVE-2017-12473: Improper Input Validation

ccnlccntlvbytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service application crash via vectors involving packets with "wrong L values."...

CVE-2017-12463: Missing Release of Resource after Effective Lifetime

Memory leak in the ccnlappRX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption via vectors involving an envelopes structure pointer when the packet format is unknown...

CVE-2017-12471: Improper Restriction of Operations within the Bounds of a Memory Buffer

The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...

CVE-2017-12464: NULL Pointer Dereference

ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service NULL pointer dereference via vectors involving the keyfile variable...

PT-2018-5407

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A buffer overflow issue exists, allowing context-dependent attackers to have an unspecified impact. This issue involves vectors related to the vallen and len variables. Recommendations: For version...

CVE-2017-12467: Missing Release of Resource after Effective Lifetime

Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption by leveraging failure to allocate memory for the comp or complen structure member...

CVE-2017-12412: Loop with Unreachable Exit Condition

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

CVE-2017-12472: NULL Pointer Dereference

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

Type confusion

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

CVE-2018-6480 describes a type confusion in CCN-lite 2. The bug occurs in ccnl_fwd_handleInterest, which assumes the union member s is of type ccnl_pktdetail_ndntlv_s; if the actual type is ccnl_pktdetail_ccntlv_s or ccnl_pktdetail_iottlv_s, the code may access uninitialized memory or data that i...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

PT-2018-17575

Name of the Vulnerable Software and Affected Versions CCN-lite version 2 Description A type confusion issue was discovered, leading to a memory access violation and a failure of the nonce feature, which is used for loop prevention. The ccnl fwd handleInterest function assumes a specific type for...