CVE-2017-12465

Published: Feb 7, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.

Affected (1)

Products: Ccn Lite: Ccn Lite

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ccn Lite Ccn Lite	Before 2.0.0

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (4)

https://github.com/cn-uofbasel/ccn-lite/issues/131

Source: cve@mitre.org

Third Party Advisory

https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/cn-uofbasel/ccn-lite/issues/131

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

Timeline

No history available yet.