Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8869

Опубликовано: 13 июн. 2016
Источник: nvd
CVSS3: 9.1
CVSS2: 6.4
EPSS Низкий

Описание

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*
Версия до 4.02.3 (включая)

EPSS

Процентиль: 86%
0.02814
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 9 лет назад

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

redhat
больше 9 лет назад

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

CVSS3: 9.1
debian
около 9 лет назад

OCaml before 4.03.0 does not properly handle sign extensions, which al ...

suse-cvrf
почти 9 лет назад

Security update for ocaml

suse-cvrf
около 9 лет назад

Security update for ocaml

EPSS

Процентиль: 86%
0.02814
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-119