NVD

Id
31883  
Name
CVE-2014-3776  
Description
Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-20  
Modified Date
2014-05-21  
Seq
2014-3776  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168129 31883 CVE-2014-3776 http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git;a=commit;h=1d06ce7e21c7e903ca5dca11fda6fcf2cc52de5e  View
168130 31883 CVE-2014-3776 [chicken-announce] 20140518 [SECURITY] Buffer-overrun in some uses of read-u8vect  View
168131 31883 CVE-2014-3776 [Chicken-hackers] 20140517 [PATCH] Bound read-u8vector! to dest vector"s size when no length is given  View
168132 31883 CVE-2014-3776 [oss-security] 20140518 CVE request for buffer overrun in CHICKEN Scheme  View
168133 31883 CVE-2014-3776 [oss-security] 20140519 Re: CVE request for buffer overrun in CHICKEN Scheme  View
168134 31883 CVE-2014-3776 67468  View
168135 31883 CVE-2014-3776 https://bugs.call-cc.org/ticket/1124  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13697 JVNDB-2014-002572 CHICKEN stable および development snapshots におけるバッファオーバーフローの脆弱性 CHICKEN stable および development snapshots の srfi-4 ユニットの "read-u8vector!" プロシージャには、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3776 71064 CVE-2014-3776 31883 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002572.html 2014-05-18 2014-05-22 View