CVE-2017-17066

The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which…

published December 5, 2017

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02222 · 82.6th percentile
Published
2017-12-05T09:00Z
EPSS history
Timeline
  • 05 DEC 09:00Z
    The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which…
    cvelistv5