ccn-lite ccn-lite vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

ccn-lite-ccnb2xml in CCN-lite prior to 2.0.0 allows context-dependent malicious users to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow.

Ccn-lite Ccn-lite

5

CVSSv2

Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite prior to 2.00 allows context-dependent malicious users to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet format is unknown.

Ccn-lite Ccn-lite

5

CVSSv2

ccn-lite-valid.c in CCN-lite prior to 2.00 allows context-dependent malicious users to cause a denial of service (NULL pointer dereference) via vectors involving the keyfile variable.

Ccn-lite Ccn-lite

7.5

CVSSv2

CCN-lite prior to 2.00 allows context-dependent malicious users to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access.

Ccn-lite Ccn-lite

7.5

CVSSv2

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite prior to 2.00 allows context-dependent malicious users to have unspecified impact via vectors involving the vallen and len variables.

Ccn-lite Ccn-lite

7.5

CVSSv2

Buffer overflow in util/ccnl-common.c in CCN-lite prior to 2.00 allows context-dependent malicious users to have unspecified impact by leveraging incorrect memory allocation.

Ccn-lite Ccn-lite

7.5

CVSSv2

Integer overflow in the ndn_parse_sequence function in CCN-lite prior to 2.00 allows context-dependent malicious users to have unspecified impact via vectors involving the typ and vallen variables.

Ccn-lite Ccn-lite

7.5

CVSSv2

ccnl-ext-mgmt.c in CCN-lite prior to 2.00 allows context-dependent malicious users to have unspecified impact by leveraging missing NULL pointer checks after ccnl_malloc.

Ccn-lite Ccn-lite

7.5

CVSSv2

Multiple integer overflows in CCN-lite prior to 2.00 allow context-dependent malicious users to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.

Ccn-lite Ccn-lite

5

CVSSv2

Memory leak in CCN-lite prior to 2.00 allows context-dependent malicious users to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure member.

Ccn-lite Ccn-lite

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook