cve/2017/CVE-2017-12465.md

CVE-2017-12465

Description

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.

POC

Reference

No PoCs from references.

Github

• https://github.com/MahdiBaghbani/ccn-iribu
• https://github.com/azadeh-afzar/CCN-IRIBU
• https://github.com/azadeh-afzar/CCN-Lite
• https://github.com/azadehafzar/CCN-IRIBU
• https://github.com/azadehafzar/CCN-Lite
• https://github.com/cn-uofbasel/ccn-lite