Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-1849

Критический

ALT-PU-2017-1849: package ocaml update to version 4.04.2-alt1.S1

Источник
errata.altlinux.org
Дата публикации
12.07.2017
Дата обновления
12.07.2017
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades ocaml to version 4.04.2-alt1.S1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 9 лет назад

OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."

CVSS3: 7.8
nvd
около 9 лет назад

OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."

CVSS3: 7.8
debian
около 9 лет назад

OCaml compiler allows attackers to have unspecified impact via unknown ...

CVSS3: 9.8
ubuntu
больше 9 лет назад

Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.

CVSS3: 7
redhat
больше 9 лет назад

Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.