CVE-2017-6949: Buffer Overflow

Published Mar 16, 2017

Updated

An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow.

Affected Software

1 affected component

Call-cc Chicken=4.12.0

Remediation

Patch Available

http://lists.gnu.org/archive/html/chicken-announce/2017-03/msg00000.html

Event History

Mar 16, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-6949?

CVE-2017-6949 is classified as a medium severity vulnerability due to potential memory management issues.

How do I fix CVE-2017-6949?

To fix CVE-2017-6949, upgrade to versions of CHICKEN Scheme later than 4.12.0 that contain the security update.

What type of vulnerability is CVE-2017-6949?

CVE-2017-6949 is a memory allocation vulnerability affecting CHICKEN Scheme.

What are the potential impacts of CVE-2017-6949?

The potential impacts of CVE-2017-6949 include segmentation faults and possible crashes of applications using the affected version.

Which versions of CHICKEN Scheme are affected by CVE-2017-6949?

CVE-2017-6949 affects CHICKEN Scheme version 4.12.0.