Homepage

Buffer Overflow The advisory has been revoked - it doesn't affect any version of package chicken  (opens in a new tab)

Threat Intelligence

EPSS
2.28% (90th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN11-CHICKEN-599543
  • published19 Aug 2020
  • disclosed31 Oct 2019
Report a new vulnerability Found a mistake?

Introduced: 31 Oct 2019

CVE-2013-2075  (opens in a new tab)
CWE-120  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:11.

NVD Description

Note: Versions mentioned in the description apply only to the upstream chicken package and not the chicken package as distributed by Debian.

Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for CVE-2012-6122.

References