PT-2017-18850 · Chicken+1 · Chicken Scheme+1

Peter Bex · Publicado 2017-06-01 · Atualizado 2024-12-05 · CVE-2017-9334

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CHICKEN Scheme versions prior to 4.13

Description The issue arises from an incorrect "pair?" check in the Scheme "length" procedure, leading to an unsafe pointer dereference. This allows an attacker to cause a denial of service by passing an improper list to an application that calls "length" on it.

Recommendations For versions prior to 4.13, update to version 4.13 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-1853

ALT-PU-2024-13015

CVE-2017-9334

Produtos afetados

Alt Linux

Chicken Scheme

Referências · 9

• https://cve.org/CVERecord?id=CVE-2017-9334 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9334 · Aviso do Fabricante
• http://lists.nongnu.org/archive/html/chicken-hackers/2017-05/msg00099.html · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9334 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-9334 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-9334 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-9334 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9334 · Nota de Segurança
• http://lists.nongnu.org/archive/html/chicken-announce/2017-05/msg00000.html · Correção