PT-2018-11452 · Ccn-Lite · Ccn-Lite

Blacksheeep · Publicado 2018-06-26 · Atualizado 2020-08-24 · CVE-2018-12889

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CCN-lite version 2.0.1

Description An issue was discovered in the handling of binary CCNx or NDN files, where a heap-based buffer overflow occurs due to an array lacking '0' termination. This can result in heap corruption. The issue is related to the mkAddToRelayCacheRequest and ccnl populate cache functions.

Recommendations For CCN-lite version 2.0.1, the issue was addressed by fixing the memory management in mkAddToRelayCacheRequest in ccn-lite-ctrl.c. Update the affected function to resolve the issue.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-12889

Produtos afetados

Ccn-Lite

Referências · 3

• 🔥 https://github.com/cn-uofbasel/ccn-lite/issues/279 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12889 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12889 · Aviso do Fabricante