CVE-2017-17066

The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.

• CWE-125

• https://eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/Issue Tracking, Third Party Advisory
• https://hackerone.com/reports/291489Issue Tracking, Third Party Advisory
• https://eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/Issue Tracking, Third Party Advisory
• https://hackerone.com/reports/291489Issue Tracking, Third Party Advisory

Published

Dec 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17058The WooCommerce plugin through 3.x for WordPress has a Direc…7.5
• CVE-2017-17059XSS exists in the amtyThumb amty-thumb-recent-post (aka amty…
• CVE-2017-17060OX Software GmbH OX App Suite 7.8.4 and earlier is affected …
• CVE-2017-17061OX Software GmbH OX App Suite 7.8.4 and earlier is affected …
• CVE-2017-17062The backend component in Open-Xchange OX App Suite before 7.…
• CVE-2017-17065An issue was discovered on D-Link DIR-605L Model B before FW…7.5
• CVE-2017-17067Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x …
• CVE-2017-17068A cross-origin vulnerability has been discovered in the Auth…
• CVE-2017-17069ActiveSetupN.exe in Amazon Audible for Windows before Novemb…
• CVE-2017-17070Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17071Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17072Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…