3 matches found
Important: ocaml
Issue Overview: In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization runtime/intern.c enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock function, which performs unbounded...
SUSE-SU-2018:1493-1 Security update for ocaml
This update for ocaml fixes the following issues: - CVE-2018-9838: The camlbadeserialize function in byterun/bigarray.c in the standard library had an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of...
SUSE-SU-2016:2194-1 Security update for ocaml
This update for ocaml fixes the following issue: Security issue fixed: - CVE-2015-8869: Prevent buffer overflow and information leak. bsc977990...