CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

CVE-2018-6948

CVE-2018-6948 affects CCN-lite 2, where the function ccnl_prefix_to_str_detailed can overflow a buffer when writing a prefix to buf. The prefix maximum is CCNL_MAX_PREFIX_SIZE, but with NFN enabled, additional characters (e.g., NFN and R2C tags) are written, allowing an NFN-R2C packet with a pref...

CCN-lite 'cnb_parse_lev' Function Denial of Service Vulnerability

CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A security vulnerability exists in the 'cnbparselev' function in CCN-lite versions prior to 2.00. An attacker could exploit this vulnerability to cause an invalid read...

CCN-lite Memory Disclosure Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A memory leak vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can cause a denial of service memory consumption by exploiting a failure to allocate memory for comp or...

CCN-lite memory leak vulnerability (CNVD-2018-03676)

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A memory leak vulnerability exists in the ccnlappRX function in ccnl-uapi.c in versions of CCN-lite prior to 2.0.0. An attacker could cause a denial of service memory consumption by...

CCN-lite integer overflow vulnerability (CNVD-2018-03678)

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An integer overflow vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can exploit this vulnerability to cause an integer overflow by involving the vallen variable in th...

CCN-lite Buffer Overflow Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A buffer overflow vulnerability exists in util/ccnl-common.c in versions of CCN-lite prior to 2.0.0. An attacker could exploit this vulnerability to cause a buffer overflow via incorrect...

CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

CVE-2017-12473

ccnlccntlvbytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service application crash via vectors involving packets with "wrong L values."...

CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

CVE-2017-12473

ccnlccntlvbytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service application crash via vectors involving packets with "wrong L values."...

Out-of-bounds

The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...

Buffer overflow

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

Out-of-bounds

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12464

ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service NULL pointer dereference via vectors involving the keyfile variable...

CVE-2017-12412

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12468

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...

CVE-2017-12470

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...

Integer overflow

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...