CVE-2014-3776 Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corru...
HighCVSS 7.5
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/chicken(Debian:12) | < 4.9.0-1 | 4.9.0-1 |
| debian/chicken(Debian:13) | < 4.9.0-1 | 4.9.0-1 |
| debian/chicken(Debian:14) | < 4.9.0-1 | 4.9.0-1 |
| call-cc chicken | <= 4.9.0 | No fix listed |
| call-cc chicken | = 4.8.0.7 | No fix listed |
References
- Debian Security Tracker CVE-2014-3776 vendor-advisory
- code.call-cc.org
- [chicken-announce] 20140518 [SECURITY] Buffer-overrun in some uses of read-u8vect mailing-list
- [Chicken-hackers] 20140517 [PATCH] Bound read-u8vector! to dest vector's size when no length is given mailing-list
- [oss-security] 20140518 CVE request for buffer overrun in CHICKEN Scheme mailing-list
- [oss-security] 20140519 Re: CVE request for buffer overrun in CHICKEN Scheme mailing-list
- 67468 vdb-entry
- bugs.call-cc.org
- GLSA-201612-54 vendor-advisory
- bugs.debian.org issue-tracking