Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Radek Micek

#29511of 56,330
9.1Total CVSS
Vulnerabilities · 1
PT-2016-4048
9.1
2016-04-29
Inria · Ocaml · CVE-2015-8869
**Name of the Vulnerable Software and Affected Versions** OCaml versions prior to 4.03.0 **Description** The issue is related to improper handling of sign extensions, which can be exploited by remote attackers to conduct buffer overflow attacks or obtain sensitive information. This can be demonstrated by passing a long string to the `String.copy` function. **Recommendations** For versions prior to 4.03.0, update to version 4.03.0 or later to resolve the issue. As a temporary workaround, consider restricting the input to the `String.copy` function to prevent buffer overflow attacks.