CVE-2018-9838
06.04.2018, 18:29
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ocaml | ocaml | 4.06.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ocaml |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ocaml |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| ocaml-compiler-libs |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| ocaml-compiler-libs-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| ocaml-ocamldoc |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| ocaml-rpm-macros |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| ocaml-runtime |
|