Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8869

Опубликовано: 13 июн. 2016
Источник: nvd
CVSS3: 9.1
CVSS2: 6.4
EPSS Низкий

Описание

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*
Версия до 4.02.3 (включая)

EPSS

Процентиль: 86%
0.02814
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.1
ubuntu
больше 9 лет назад

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

redhat
почти 10 лет назад

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

CVSS3: 9.1
debian
больше 9 лет назад

OCaml before 4.03.0 does not properly handle sign extensions, which al ...

suse-cvrf
больше 9 лет назад

Security update for ocaml

suse-cvrf
больше 9 лет назад

Security update for ocaml

EPSS

Процентиль: 86%
0.02814
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-119