chicken vulnerabilities

Products

• chicken 6

Latest chicken CVEs

Newest publication first

1. CVE-2012-6125 Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.

   Published 2019-10-31

   Critical·CVSS 9.8 EPSS 1.8%

   Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.

2. CVE-2012-6124 A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes (and....

   Published 2019-10-31

   Medium·CVSS 5.3 EPSS 1.3%

   A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes (and is advertised as being unsuitable)."

3. CVE-2012-6123 Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."

   Published 2019-10-31

   Medium·CVSS 6.5 EPSS 1.3%

   Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."

4. CVE-2012-6122 Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value.

   Published 2019-10-31

   High·CVSS 7.5 EPSS 2.3%

   Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value.

5. CVE-2013-2075 Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a...

   Published 2019-10-31

   High·CVSS 8.8 EPSS 2.2%

   Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of...

6. CVE-2013-2024 OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

   Published 2019-10-31

   High·CVSS 8.8 EPSS 4.6%

   OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.