Back to Database
Status published
Critical
CVE-2017-12470
Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00...
Vulnerability Description
Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-12470
Credits & Attribution
No credits recorded in the NVD database.
More from ccn-lite
View All →CVE-2018-7039
CCN-lite 2.0.0 Beta allows remote attackers to cause a denial...
Critical
9.8
CVE-2018-6953
In CCN-lite 2, the Parser of NDNTLV does not verify...
Critical
9.8
CVE-2018-6948
In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer...
Critical
9.8
CVE-2018-6480
A type confusion issue was discovered in CCN-lite 2, leading...
High
8.8
CVE-2018-12889
An issue was discovered in CCN-lite 2.0.1. There is a...
Critical
9.8
Affected Vendor
ccn-lite
View all reports →Affected Software
ccn-lite
Vulnerable Versions:
0
Timeline
Official Publish:
February 7th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.