Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Radek Micek

#27833de 53,638
9.1CVSS total
Vulnerabilidades · 1
PT-2016-4048
9.1
2016-04-29
Inria · Ocaml · CVE-2015-8869
**Name of the Vulnerable Software and Affected Versions** OCaml versions prior to 4.03.0 **Description** The issue is related to improper handling of sign extensions, which can be exploited by remote attackers to conduct buffer overflow attacks or obtain sensitive information. This can be demonstrated by passing a long string to the `String.copy` function. **Recommendations** For versions prior to 4.03.0, update to version 4.03.0 or later to resolve the issue. As a temporary workaround, consider restricting the input to the `String.copy` function to prevent buffer overflow attacks.