CVE-2014-3776: Buffer Overflow
Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3776?
CVE-2014-3776 is classified as a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2014-3776?
To fix CVE-2014-3776, upgrade to Chicken version 4.9.1 or later.
What causes the vulnerability in CVE-2014-3776?
CVE-2014-3776 is caused by a buffer overflow in the 'read-u8vector!' procedure when it processes a '#f' value in the NUM argument.
Who is affected by CVE-2014-3776?
CVE-2014-3776 affects users running Chicken versions 4.8.0.7 and earlier, as well as development snapshots before version 4.9.1.
What type of attacks can exploit CVE-2014-3776?
CVE-2014-3776 can be exploited by remote attackers to initiate denial of service attacks through memory corruption.