CVE-2017-9334: Input Validation
An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by passing an improper list to an application that calls "length" on it.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9334?
CVE-2017-9334 is classified as a high-severity vulnerability due to its potential to lead to a denial of service.
How do I fix CVE-2017-9334?
To fix CVE-2017-9334, upgrade to CHICKEN Scheme version 4.13 or later.
What causes the vulnerability in CVE-2017-9334?
CVE-2017-9334 is caused by an incorrect 'pair?' check in the Scheme 'length' procedure.
Which versions of CHICKEN Scheme are affected by CVE-2017-9334?
CVE-2017-9334 affects all versions of CHICKEN Scheme prior to 4.13.
What can an attacker do with CVE-2017-9334?
An attacker can exploit CVE-2017-9334 to cause a denial of service by passing an improper list to applications that invoke the 'length' procedure.