CVE-2013-2075: Buffer Overflow
Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for CVE-2012-6122.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2075?
CVE-2013-2075 has a severity rating that indicates it can lead to denial of service due to multiple buffer overflow vulnerabilities.
How do I fix CVE-2013-2075?
To fix CVE-2013-2075, upgrade to Chicken versions 5.2.0-2, 5.3.0-1, or 5.3.0-2.
Which versions of Chicken are affected by CVE-2013-2075?
Versions of Chicken up to and including 4.8.0.3 are affected by CVE-2013-2075.
What causes the vulnerability in CVE-2013-2075?
CVE-2013-2075 is caused by multiple buffer overflows in specific Chicken procedures when handling large integer file descriptors.
Is there a known workaround for CVE-2013-2075?
There are no known workarounds for CVE-2013-2075; the recommended action is to upgrade to a secure version.