CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

CVE-2018-12889

CCN-lite 2.0.1 contains a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache caused by an array lacking a terminating '\0' when reading binary CCNx/NDN files. The issue leads to heap corruption. Remediation implemented: memory management in mkAddToRelayCacheRequest ...