PT-2015-4327 · Chicken · Chicken

Publicado 2015-08-28 · Atualizado 2017-07-01 · CVE-2014-9651

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CHICKEN versions 4.9.0.x before 4.9.0.2 CHICKEN versions 4.9.x before 4.9.1 CHICKEN versions prior to 5.0

Description The issue is related to a buffer overflow that allows attackers to have an unspecified impact. This occurs when a positive START argument is passed to the substring-index[-ci] procedures.

Recommendations For CHICKEN versions 4.9.0.x before 4.9.0.2, update to version 4.9.0.2 or later. For CHICKEN versions 4.9.x before 4.9.1, update to version 4.9.1 or later. For CHICKEN versions prior to 5.0, update to version 5.0 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-9651

Produtos afetados

Chicken

Referências · 11

• https://ubuntu.com/security/CVE-2014-9651 · Aviso do Fabricante
• http://lists.nongnu.org/archive/html/chicken-hackers/2014-12/msg00000.html · Nota
• http://lists.nongnu.org/archive/html/chicken-users/2015-01/msg00048.html · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2014-9651 · Nota de Segurança
• https://security.gentoo.org/glsa/201612-54 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-9651 · Aviso do Fabricante
• http://securityfocus.com/bid/72011 · Nota
• https://security-tracker.debian.org/tracker/CVE-2014-9651 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9651 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-9651 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2014-9651 · Aviso do Fabricante