ccn-lite vulnerabilities and fixes

Recent CVEs affecting ccn-lite, with upgrade or downgrade steps. 17 tracked.

Also searched as: ccn lite.

ccn-lite has 17 tracked vulnerabilities, 11 critical. A fixed release or vendor patch exists for 12. Most recent: 2018-06-26. Highest priority: CVE-2018-12889 (score 62/100).

• CVE-2018-7039 CRITICAL 9.8 DOWNGRADE CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have un
• CVE-2018-6953 CRITICAL 9.8 DOWNGRADE In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the act
• CVE-2018-6948 CRITICAL 9.8 DOWNGRADE In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to
• CVE-2018-6480 HIGH 8.8 DOWNGRADE A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the
• CVE-2018-12889 CRITICAL 9.8 DOWNGRADE An issue was discovered in CCN-lite 2.0.1
• CVE-2017-12473 HIGH 7.5 UPGRADE ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application
• CVE-2017-12472 CRITICAL 9.8 UPGRADE ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by lever
• CVE-2017-12471 CRITICAL 9.8 UPGRADE The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impa
• CVE-2017-12470 CRITICAL 9.8 UPGRADE Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers
• CVE-2017-12469 CRITICAL 9.8 UPGRADE Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspe
• CVE-2017-12468 CRITICAL 9.8 UPGRADE Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unsp
• CVE-2017-12467 HIGH 7.5 UPGRADE Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory co
• CVE-2017-12466 CRITICAL 9.8 UPGRADE CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_
• CVE-2017-12465 CRITICAL 9.8 UPGRADE Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impac
• CVE-2017-12464 HIGH 7.5 UPGRADE ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL
• CVE-2017-12463 HIGH 7.5 UPGRADE Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attack
• CVE-2017-12412 HIGH 7.8 UPGRADE ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a

FAQ

How do I fix ccn-lite vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ccn-lite being exploited right now?

None of the tracked ccn-lite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ccn-lite CVE should I patch first?

CVE-2018-12889 currently ranks highest (62/100): An issue was discovered in CCN-lite 2.0.1.

RSS feed for ccn-lite · ← Back to latest CVEs