3 matches found
Important: ocaml
Issue Overview: In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization runtime/intern.c enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock function, which performs unbounded...
7.9CVSS6.6AI score0.0021EPSS
SaveExploits0
SUSE-SU-2018:1493-1 Security update for ocaml
This update for ocaml fixes the following issues: - CVE-2018-9838: The camlbadeserialize function in byterun/bigarray.c in the standard library had an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of...
9.8CVSS9.6AI score0.04216EPSS
SaveExploits0References3
20