CVE-2017-11343: High severity Call-cc Chicken vulnerability
Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in O(n) lookup time.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11343?
CVE-2017-11343 is classified as a medium severity vulnerability due to the potential for an algorithmic complexity attack.
How do I fix CVE-2017-11343?
To fix CVE-2017-11343, upgrade to a version of CHICKEN Scheme later than 4.12.0, where the vulnerability is addressed.
Which versions of CHICKEN Scheme are affected by CVE-2017-11343?
All versions of CHICKEN Scheme up to and including 4.12.0 are affected by CVE-2017-11343.
What type of attack is associated with CVE-2017-11343?
CVE-2017-11343 is associated with an algorithmic complexity attack that can degrade performance during symbol table lookups.
Can an attacker exploit CVE-2017-11343 remotely?
Yes, an attacker can exploit CVE-2017-11343 remotely by providing specially crafted input.