CVE-2016-6831: High severity call/cc chicken vulnerability
The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6831?
CVE-2016-6831 has a medium severity due to its potential for causing resource exhaustion or denial of service.
How do I fix CVE-2016-6831?
To fix CVE-2016-6831, upgrade to a version of CHICKEN later than 4.11.0 that addresses the memory leak issue.
What types of systems are affected by CVE-2016-6831?
CVE-2016-6831 affects all versions of the CHICKEN programming language up to and including 4.11.0.
What exploit does CVE-2016-6831 enable?
CVE-2016-6831 enables attackers to exploit a memory leak for potential resource exhaustion and denial of service.
Is CVE-2016-6831 a remote or local vulnerability?
CVE-2016-6831 can be exploited locally, as it involves memory management during execution process functions.