CVE-2012-6124

概要

参考情報

• openwall.com/lists/oss-security/2013/02/08/2 · Mailing List
• access.redhat.com/security/cve/cve-2012-6124 · Broken Link
• lists.nongnu.org/archive/html/chicken-hackers/2012-02/msg00084.html · Mailing List
• security-tracker.debian.org/tracker/CVE-2012-6124 · Third Party Advisory

chicken のその他の脆弱性

• CVE-2022-45145緊急 9.8egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .eg…
• CVE-2014-6310緊急 9.8Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function.
• CVE-2013-2075高 8.8Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows…
• CVE-2012-6125緊急 9.8Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.
• CVE-2012-6123中 6.5Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."