PT-2017-17417
CVE-2017-6949
·
Published
2017-03-16
·
Updated
2026-09-30
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CHICKEN Scheme versions prior to 4.12.0
Description
An issue was discovered when using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory. The vector size would be used in unsanitised form as an argument to
malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow.Recommendations
For versions prior to 4.12.0, update to version 4.12.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾