Описание
Security update for ocaml
This update for ocaml fixes the following issues:
- CVE-2018-9838: The caml_ba_deserialize function in byterun/bigarray.c in the standard library had an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object. [bsc#1088591]
This update was imported from the SUSE:SLE-12-SP2:Update update project.
Список пакетов
openSUSE Leap 42.3
ocaml-4.03.0-4.6.1
ocaml-compiler-libs-4.03.0-4.6.1
ocaml-compiler-libs-devel-4.03.0-4.6.1
ocaml-docs-4.03.0-4.6.1
ocaml-emacs-4.03.0-4.6.1
ocaml-ocamldoc-4.03.0-4.6.1
ocaml-rpm-macros-4.03.0-4.6.1
ocaml-runtime-4.03.0-4.6.1
ocaml-source-4.03.0-4.6.1
ocaml-x11-4.03.0-4.6.1
Ссылки
- E-Mail link for openSUSE-SU-2018:1561-1
- SUSE Security Ratings
Описание
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.
Затронутые продукты
openSUSE Leap 42.3:ocaml-4.03.0-4.6.1
openSUSE Leap 42.3:ocaml-compiler-libs-4.03.0-4.6.1
openSUSE Leap 42.3:ocaml-compiler-libs-devel-4.03.0-4.6.1
openSUSE Leap 42.3:ocaml-docs-4.03.0-4.6.1
Ссылки
- CVE-2018-9838
- SUSE Bug 1088591