CVE-2016-6830 in Schemeinformation

Résumé

par MITRE

The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Réserver

17/08/2016

Divulgation

10/01/2017

Modérer

accepté

Entrée

VDB-95121

CPE

prêt

EPSS

0.02107

KEV

non

Activités

très faible

Sources

Want to know what is going to be exploited?

We predict KEV entries!