Heap overflow

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

CVE-2018-12889

CCN-lite 2.0.1 contains a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache caused by an array lacking a terminating '\0' when reading binary CCNx/NDN files. The issue leads to heap corruption. Remediation implemented: memory management in mkAddToRelayCacheRequest ...

CVE-2018-12889: Out-of-bounds Write

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

PT-2018-11452

Name of the Vulnerable Software and Affected Versions CCN-lite version 2.0.1 Description An issue was discovered in the handling of binary CCNx or NDN files, where a heap-based buffer overflow occurs due to an array lacking '0' termination. This can result in heap corruption. The issue is related...