PatchTheCVEccn-lite vulnerabilities
Recent CVEs affecting ccn-lite products. 17 tracked.
ccn-lite has 17 tracked vulnerabilities, 11 critical. A fixed release or vendor patch exists for 12. Most recent: 2018-06-26. Highest priority: CVE-2018-12889 (score 62/100).
- CVE-2018-7039 CRITICAL 9.8 DOWNGRADE CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have un
- CVE-2018-6953 CRITICAL 9.8 DOWNGRADE In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the act
- CVE-2018-6948 CRITICAL 9.8 DOWNGRADE In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to
- CVE-2018-6480 HIGH 8.8 DOWNGRADE A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the
- CVE-2018-12889 CRITICAL 9.8 DOWNGRADE An issue was discovered in CCN-lite 2.0.1
- CVE-2017-12473 HIGH 7.5 UPGRADE ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application
- CVE-2017-12472 CRITICAL 9.8 UPGRADE ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by lever
- CVE-2017-12471 CRITICAL 9.8 UPGRADE The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impa
- CVE-2017-12470 CRITICAL 9.8 UPGRADE Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers
- CVE-2017-12469 CRITICAL 9.8 UPGRADE Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspe
- CVE-2017-12468 CRITICAL 9.8 UPGRADE Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unsp
- CVE-2017-12467 HIGH 7.5 UPGRADE Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory co
- CVE-2017-12466 CRITICAL 9.8 UPGRADE CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_
- CVE-2017-12465 CRITICAL 9.8 UPGRADE Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impac
- CVE-2017-12464 HIGH 7.5 UPGRADE ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL
- CVE-2017-12463 HIGH 7.5 UPGRADE Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attack
- CVE-2017-12412 HIGH 7.8 UPGRADE ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a
FAQ
How do I fix ccn-lite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ccn-lite being exploited right now?
None of the tracked ccn-lite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ccn-lite CVE should I patch first?
CVE-2018-12889 currently ranks highest (62/100): An issue was discovered in CCN-lite 2.0.1.