CVE

Id
93650  
CVE No.
CVE-2016-6830  
Status
Candidate  
Description
The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).  
Phase
Assigned (20160817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794214 93650 CVE-2016-6830 MLIST:[chicken-announce] 20160812 [SECURITY] Buffer overrun in process-execute and process-spawn  View
794215 93650 CVE-2016-6830 URL:http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html  View
794216 93650 CVE-2016-6830 BID:92550  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4081 JVNDB-2016-004854 Charybdis の modules/m_sasl.c の m_authenticate 関数における証明書のフィンガープリントを偽造される脆弱性 Charybdis の modules/m_sasl.c の m_authenticate 関数には、証明書のフィンガープリントを偽造され、その結果、別のユーザとしてログインされる脆弱性が存在します。 CVE-2016-7143 93650 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004854.html  View