CCN-lite integer overflow vulnerability (CNVD-2018-03678)

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An integer overflow vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can exploit this vulnerability to cause an integer overflow by involving the vallen variable in th...

PT-2018-5404

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue involves multiple integer overflows that can be exploited by context-dependent attackers. The overflows occur in the iottlv parse sequence function, which involves the vallen variable, an...