Ocaml

Ocaml

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-9838

  • EPSS 1.12%
  • Published 06.04.2018 18:29:00
  • Last modified 21.11.2024 04:15:46

The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of servi...

7.8

CVE-2017-9779

  • EPSS 0.09%
  • Published 07.09.2017 14:29:00
  • Last modified 20.04.2025 01:37:25

OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."

10

CVE-2017-9772

  • EPSS 6.64%
  • Published 23.06.2017 20:29:00
  • Last modified 20.04.2025 01:37:25

Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment v...

9.1

CVE-2015-8869

  • EPSS 2.81%
  • Published 13.06.2016 19:59:01
  • Last modified 12.04.2025 10:46:40

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.