https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-12889.htmlhttps://patchthecve.com/cve/CVE-2018-12889.htmlWed, 17 Jun 2026 01:38:31 +0000CRITICAL 9.8: An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managementhttps://patchthecve.com/cve/CVE-2018-7039.htmlhttps://patchthecve.com/cve/CVE-2018-7039.htmlWed, 17 Jun 2026 02:02:34 +0000CRITICAL 9.8: CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because the ccnl_ndntlv_prependBlob function in ccnl-pkt-ndntlv.c can be called with wrong arguments. Specifically, there is an incorrect integer data type causing a nhttps://patchthecve.com/cve/CVE-2018-6953.htmlhttps://patchthecve.com/cve/CVE-2018-6953.htmlWed, 17 Jun 2026 02:02:30 +0000CRITICAL 9.8: In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses.https://patchthecve.com/cve/CVE-2018-6948.htmlhttps://patchthecve.com/cve/CVE-2018-6948.htmlWed, 17 Jun 2026 02:02:29 +0000CRITICAL 9.8: In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNL_MAX_PREFIX_SIZE; the buffer has the size CCNL_MAX_PREFIX_SIZE. However, when NFN is enabled, additional characters are written to the bhttps://patchthecve.com/cve/CVE-2017-12473.htmlhttps://patchthecve.com/cve/CVE-2017-12473.htmlWed, 17 Jun 2026 01:03:21 +0000HIGH 7.5: ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values."https://patchthecve.com/cve/CVE-2017-12472.htmlhttps://patchthecve.com/cve/CVE-2017-12472.htmlWed, 17 Jun 2026 01:03:21 +0000CRITICAL 9.8: ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnl_malloc.https://patchthecve.com/cve/CVE-2017-12471.htmlhttps://patchthecve.com/cve/CVE-2017-12471.htmlWed, 17 Jun 2026 01:03:21 +0000CRITICAL 9.8: The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function.https://patchthecve.com/cve/CVE-2017-12470.htmlhttps://patchthecve.com/cve/CVE-2017-12470.htmlWed, 17 Jun 2026 01:03:21 +0000CRITICAL 9.8: Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables.https://patchthecve.com/cve/CVE-2017-12469.htmlhttps://patchthecve.com/cve/CVE-2017-12469.htmlWed, 17 Jun 2026 01:03:21 +0000CRITICAL 9.8: Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation.https://patchthecve.com/cve/CVE-2017-12468.htmlhttps://patchthecve.com/cve/CVE-2017-12468.htmlWed, 17 Jun 2026 01:03:21 +0000CRITICAL 9.8: Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables.https://patchthecve.com/cve/CVE-2017-12467.htmlhttps://patchthecve.com/cve/CVE-2017-12467.htmlWed, 17 Jun 2026 01:03:21 +0000HIGH 7.5: Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure member.https://patchthecve.com/cve/CVE-2017-12466.htmlhttps://patchthecve.com/cve/CVE-2017-12466.htmlWed, 17 Jun 2026 01:03:21 +0000CRITICAL 9.8: CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access.https://patchthecve.com/cve/CVE-2017-12465.htmlhttps://patchthecve.com/cve/CVE-2017-12465.htmlWed, 17 Jun 2026 01:03:20 +0000CRITICAL 9.8: Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.https://patchthecve.com/cve/CVE-2017-12464.htmlhttps://patchthecve.com/cve/CVE-2017-12464.htmlWed, 17 Jun 2026 01:03:20 +0000HIGH 7.5: ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via vectors involving the keyfile variable.https://patchthecve.com/cve/CVE-2017-12463.htmlhttps://patchthecve.com/cve/CVE-2017-12463.htmlWed, 17 Jun 2026 01:03:20 +0000HIGH 7.5: Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet format is unknown.https://patchthecve.com/cve/CVE-2017-12412.htmlhttps://patchthecve.com/cve/CVE-2017-12412.htmlWed, 17 Jun 2026 01:03:15 +0000HIGH 7.8: ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow.https://patchthecve.com/cve/CVE-2018-6480.htmlhttps://patchthecve.com/cve/CVE-2018-6480.htmlWed, 17 Jun 2026 02:01:53 +0000HIGH 8.8: A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for example, helped with loop prevention). ccnl_fwd_handleInterest assumes that the union member s is of type ccnl_pktdetail_ndntlv_s. However, if the type is in fact