CVE-2017-12465

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-07

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Ccn-lite (Ccn-lite)

References

• https://github.com/cn-uofbasel/ccn-lite/issues/131
• https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0