High severity7.5NVD Advisory· Published Dec 5, 2017· Updated Jun 17, 2026
CVE-2017-17066
CVE-2017-17066
Description
The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/nvdIssue TrackingThird Party Advisory
- hackerone.com/reports/291489nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.