Ccn-lite
15 CVEs tracked since 2018. Since Feb 2018, none of them reached CISA KEV.
Ccn-lite CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2018-02 | 15 | 0 |
| 2018-03 | 2 or fewer | |
| 2018-04 | no snapshot | |
| 2018-05 | no snapshot | |
| 2018-06 | 2 or fewer | |
| 2018-07 | 2 or fewer | |
| 2018-08 | 2 or fewer | |
| 2018-09 | 2 or fewer | |
| 2018-10 | 2 or fewer | |
| 2018-11 | no snapshot | |
| 2018-12 | 2 or fewer | |
| 2019-01 | no snapshot | |
| 2019-02 | 1 or fewer | |
| 2019-03 | no snapshot | |
| 2019-04 | no snapshot | |
| 2019-05 | 1 or fewer | |
| 2019-06 | no snapshot | |
| 2019-07 | 2 or fewer | |
| 2019-08 | 2 or fewer | |
| 2019-09 | 2 or fewer | |
| 2019-10 | 2 or fewer | |
| 2019-11 | 2 or fewer | |
| 2019-12 | 2 or fewer | |
| 2020-01 | 2 or fewer | |
| 2020-02 | 2 or fewer | |
| 2020-03 | 2 or fewer | |
| 2020-04 | no snapshot | |
| 2020-05 | no snapshot | |
| 2020-06 | 2 or fewer | |
| 2020-07 | no snapshot | |
| 2020-08 | 2 or fewer | |
| 2020-09 | 1 or fewer | |
| 2020-10 | 1 or fewer | |
| 2020-11 | 1 or fewer | |
| 2020-12 | 2 or fewer | |
| 2021-01 | 2 or fewer | |
| 2021-02 | 2 or fewer | |
| 2021-03 | no snapshot | |
| 2021-04 | 2 or fewer | |
| 2021-05 | 2 or fewer | |
| 2021-06 | 2 or fewer | |
| 2021-07 | 2 or fewer | |
| 2021-08 | 3 or fewer | |
| 2021-09 | 2 or fewer | |
| 2021-10 | 2 or fewer | |
| 2021-11 | 2 or fewer | |
| 2021-12 | 2 or fewer | |
| 2022-01 | 2 or fewer | |
| 2022-02 | 2 or fewer | |
| 2022-03 | 3 or fewer | |
| 2022-04 | 3 or fewer | |
| 2022-05 | 3 or fewer | |
| 2022-06 | 3 or fewer | |
| 2022-07 | 3 or fewer | |
| 2022-08 | 3 or fewer | |
| 2022-09 | 3 or fewer | |
| 2022-10 | 2 or fewer | |
| 2022-11 | 3 or fewer | |
| 2022-12 | 3 or fewer | |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 3 or fewer | |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Ccn-lite's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Ccn-lite.
- CVE-2018-12889An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary C...9.8
- CVE-2018-7039CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because the ccnl_ndntlv_prependBlob function in ccnl-pkt-ndntlv....9.8
- CVE-2018-6953In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory ac...9.8
- CVE-2018-6948In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNL_MAX_PREFIX_SIZE; the buffer has ...9.8
- CVE-2017-12468Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables.9.8
- CVE-2017-12464ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via vectors involving the keyfile variable.7.5
- CVE-2017-12469Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation.9.8
- CVE-2017-12466CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access.9.8
- CVE-2017-12467Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure m...7.5
- CVE-2017-12463Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope...7.5
- CVE-2017-12471The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an inval...9.8
- CVE-2017-12470Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables.9.8
- CVE-2017-12412ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow.7.8
- CVE-2017-12473ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values."7.5
- CVE-2017-12472ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnl_malloc.9.8
The record
- Peak rank
- #29 in Feb 2018
- Busiest month shown
- Feb 2018, 15 CVEs
- Months with a KEV entry
- 0 since Feb 2018
- Monthly snapshots
- 1 since 2018