CVE-2017-12465

CCN-lite before 2.00 contains integer overflow flaws in iottlv_parse_sequence (vallen) and in localrpc_parse (typ, vallen, i), enabling context-dependent attackers to cause unspecified impact. Patch/upgrade to 2.0.0 is implied by the CNVD entry; no explicit exploit details or attacker workflow ar...