CVE-2012-6123

MEDIUM 6.5CVE-2012-6123 · Published 31/10/2019 · updated 16/06/2026

In short

CVE-2012-6123 is a MEDIUM (CVSS 6.5) vulnerability affecting chicken (call-cc).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
Fix: update to 4.8.0 or later.

Package	Affected versions	Patched versions
chicken call-cc	`< 4.8.0`	`4.8.0`

Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 4.8.0

4.8.0

More vulnerabilities in chicken

See all →