Lucene search
HistoryOct 09, 2013 - 2:54 p.m.
CVE-2013-4385
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.09
Percentile
94.6%
Buffer overflow in the “read-string!” procedure in the “extras” unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a “#f” value in the NUM argument.
Affected configurations
Node
call-ccchickenRange≤4.8.0.4
ORcall-ccchickenMatch3.0.0
ORcall-ccchickenMatch3.1.0
ORcall-ccchickenMatch3.2.0
ORcall-ccchickenMatch3.3.0
ORcall-ccchickenMatch3.4.0
ORcall-ccchickenMatch4.0.0
ORcall-ccchickenMatch4.1.0
ORcall-ccchickenMatch4.2.0
ORcall-ccchickenMatch4.3.0
ORcall-ccchickenMatch4.4.0
ORcall-ccchickenMatch4.5.0
ORcall-ccchickenMatch4.6.0
ORcall-ccchickenMatch4.7.0
ORcall-ccchickenMatch4.7.0.6
ORcall-ccchickenMatch4.8.0
ORcall-ccchickenMatch4.8.0.1
ORcall-ccchickenMatch4.8.0.2
ORcall-ccchickenMatch4.8.0.3
Node
call-ccchickenRange≤4.8.1
ORcall-ccchickenMatch4.3.3
ORcall-ccchickenMatch4.3.4
ORcall-ccchickenMatch4.3.5
ORcall-ccchickenMatch4.3.6
ORcall-ccchickenMatch4.3.7
ORcall-ccchickenMatch4.4.3
ORcall-ccchickenMatch4.4.4
ORcall-ccchickenMatch4.4.5
ORcall-ccchickenMatch4.4.6
ORcall-ccchickenMatch4.5.2
ORcall-ccchickenMatch4.5.5
ORcall-ccchickenMatch4.5.6
ORcall-ccchickenMatch4.5.7
ORcall-ccchickenMatch4.6.1
ORcall-ccchickenMatch4.6.2
ORcall-ccchickenMatch4.6.3
ORcall-ccchickenMatch4.6.5
ORcall-ccchickenMatch4.6.6
ORcall-ccchickenMatch4.6.7
ORcall-ccchickenMatch4.7.2
ORcall-ccchickenMatch4.7.3
ORcall-ccchickenMatch4.7.4
ORcall-ccchickenMatch4.8.0rc1
ORcall-ccchickenMatch4.8.0rc2
ORcall-ccchickenMatch4.8.0rc3
ORcall-ccchickenMatch4.8.0rc4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| call-cc | chicken | * | cpe:2.3:a:call-cc:chicken:*:*:*:*:*:*:*:* |
| call-cc | chicken | 3.0.0 | cpe:2.3:a:call-cc:chicken:3.0.0:*:*:*:*:*:*:* |
| call-cc | chicken | 3.1.0 | cpe:2.3:a:call-cc:chicken:3.1.0:*:*:*:*:*:*:* |
| call-cc | chicken | 3.2.0 | cpe:2.3:a:call-cc:chicken:3.2.0:*:*:*:*:*:*:* |
| call-cc | chicken | 3.3.0 | cpe:2.3:a:call-cc:chicken:3.3.0:*:*:*:*:*:*:* |
| call-cc | chicken | 3.4.0 | cpe:2.3:a:call-cc:chicken:3.4.0:*:*:*:*:*:*:* |
| call-cc | chicken | 4.0.0 | cpe:2.3:a:call-cc:chicken:4.0.0:*:*:*:*:*:*:* |
| call-cc | chicken | 4.1.0 | cpe:2.3:a:call-cc:chicken:4.1.0:*:*:*:*:*:*:* |
| call-cc | chicken | 4.2.0 | cpe:2.3:a:call-cc:chicken:4.2.0:*:*:*:*:*:*:* |
| call-cc | chicken | 4.3.0 | cpe:2.3:a:call-cc:chicken:4.3.0:*:*:*:*:*:*:* |
References
Related
nessus
nessus
Fedora 20 : chicken-4.8.0.5-1.fc20 (2013-22130)
2014-02-10 00:00:00
Fedora 19 : chicken-4.8.0.4-4.fc19 (2013-17868)
2013-09-30 00:00:00
Fedora 18 : chicken-4.8.0.4-4.fc18 (2013-17912)
2013-11-26 00:00:00
prion
prion
Buffer overflow
2013-10-09 14:54:00
openvas
openvas
Fedora Update for chicken FEDORA-2013-17868
2013-10-03 00:00:00
Fedora Update for chicken FEDORA-2013-17912
2013-11-26 00:00:00
Fedora Update for chicken FEDORA-2013-17912
2013-11-26 00:00:00
cvelist
cvelist
CVE-2013-4385
2013-10-09 14:44:00
fedora
fedora
[SECURITY] Fedora 19 Update: chicken-4.8.0.4-4.fc19
2013-09-30 00:48:07
[SECURITY] Fedora 20 Update: chicken-4.8.0.5-1.fc20
2014-02-09 03:52:09
[SECURITY] Fedora 18 Update: chicken-4.8.0.4-4.fc18
2013-11-26 04:01:22
debiancve
debiancve
CVE-2013-4385
2013-10-09 14:54:26
ubuntucve
ubuntucve
CVE-2013-4385
2013-10-09 00:00:00
cve
cve
CVE-2013-4385
2013-10-09 14:54:26
gentoo
gentoo
Chicken: Multiple vulnerabilities
2016-12-31 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.09
Percentile
94.6%
Related for NVD:CVE-2013-4385