FreeBSD : chicken -- multiple vulnerabilities (5a771686-9e33-11e8-8b2d-9cf7a8059466)

CHICKEN reports : - CVE-2017-6949: Unchecked malloc call in SRFI-4 constructors when allocating in non-GC memory, resulting in potential 1-word buffer overrun and/or segfault - CVE-2017-9334: 'length' crashes on improper lists - CVE-2017-11343: The randomization factor of the symbol table was set...

Fedora 26 : chicken (2017-1f3ee3bea6)

Fix for CVE-2017-6949, also bump to 4.12.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 25 : chicken (2017-cc606f1001)

Fix for CVE-2017-6949, also bump to 4.12.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : chicken (2017-947da3daa5)

Fix for CVE-2017-6949, also bump to 4.12.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for chicken FEDORA-2017-947da3daa5

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 908-1] chicken security update

Package : chicken Version : 4.7.0-1+deb7u2 CVE ID : CVE-2017-6949 Debian Bug : 858057 It was found that CHICKEN did not sanitize the size argument when allocating SRFI-4 vectors, which could lead to segfaults or buffer overflows with some sizes. For Debian 7 "Wheezy", these problems have been fix...

CVE-2017-6949

CVE-2017-6949 affects CHICKEN Scheme up to version 4.12.0. A nonstandard CHICKEN extension allocates an SRFI-4 vector in unmanaged memory, and the vector size is passed to malloc() without sanitisation. An unexpected size can lead to a segfault or a buffer overflow. The connected documents refere...

CVE-2017-6949

An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc. With an unexpected size, the impact may have been a segfault ...