PT-2017-17417
CVE-2017-6949
·
Publicado
2017-03-16
·
Atualizado
2026-09-30
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CHICKEN Scheme versions prior to 4.12.0
Description
An issue was discovered when using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory. The vector size would be used in unsanitised form as an argument to
malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow.Recommendations
For versions prior to 4.12.0, update to version 4.12.0 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾