CVE-2014-3776
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.
Desbordamiento de buffer en el procedimiento 'read-u8vector!' en la unidad srfi-4 en CHICKEN Stable 4.8.0.7 y Development Snapshots anterior a 4.9.1 permite a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída de aplicación) y posiblemente ejecutar código arbitrario a través de un valor '#f' en el argumento NUM.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-05-19 CVE Reserved
- 2014-05-20 CVE Published
- 2023-11-14 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commit%3Bh=1d06ce7e21c7e903ca5dca11fda6fcf2cc52de5e | X_refsource_confirm | |
| http://lists.gnu.org/archive/html/chicken-announce/2014-05/msg00001.html | Mailing List | |
| http://lists.gnu.org/archive/html/chicken-hackers/2014-05/msg00032.html | Mailing List | |
| http://seclists.org/oss-sec/2014/q2/328 | Mailing List |
|
| http://seclists.org/oss-sec/2014/q2/334 | Mailing List |
|
| http://www.securityfocus.com/bid/67468 | Vdb Entry | |
| https://bugs.call-cc.org/ticket/1124 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://security.gentoo.org/glsa/201612-54 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Call-cc Search vendor "Call-cc" | Chicken Search vendor "Call-cc" for product "Chicken" | <= 4.9.0 Search vendor "Call-cc" for product "Chicken" and version " <= 4.9.0" | development_snapshot |
Affected
| ||||||
| Call-cc Search vendor "Call-cc" | Chicken Search vendor "Call-cc" for product "Chicken" | 4.8.0.7 Search vendor "Call-cc" for product "Chicken" and version "4.8.0.7" | - |
Affected
| ||||||