CVE-2017-12473

Name: CVE-2017-12473
Creator: NVD / NIST
Published: 2018-02-07T17:29:01.077+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.35%

Last modified Jun 17, 2026

CVE-2017-12473 is a vulnerability of currently unknown severity. ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values.". EPSS estimates a 1.35% chance of exploitation in the next 30 days.

Description

ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values."

Metrics

EPSS Probability

1.35%

67.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Ccn-Lite	Ccn-Lite	< 2.0.0

References

https://github.com/cn-uofbasel/ccn-lite/issues/139Third Party Advisory
https://github.com/cn-uofbasel/ccn-lite/issues/139Third Party Advisory

Timeline

Published: Feb 7, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-12473?

ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values."

How severe is CVE-2017-12473?

Severity scoring for CVE-2017-12473 is pending analysis. The EPSS model estimates a 1.35% probability of exploitation in the next 30 days.

How do I fix CVE-2017-12473?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-12473?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST