Back to search
CVE-2015-8869
Published: Jun 13, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2016:1296
vendor-advisory
x_refsource_REDHAT
RHSA-2016:2576
vendor-advisory
x_refsource_REDHAT
GLSA-201702-15
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:2273
vendor-advisory
x_refsource_SUSE
[oss-security] 20160429 Re: buffer overflow and information leak in OCaml < 4.03.0
mailing-list
x_refsource_MLIST
FEDORA-2016-1c4e616564
vendor-advisory
x_refsource_FEDORA
RHSA-2017:0564
vendor-advisory
x_refsource_REDHAT
89318
vdb-entry
x_refsource_BID
RHSA-2017:0565
vendor-advisory
x_refsource_REDHAT
openSUSE-SU-2016:1335
vendor-advisory
x_refsource_SUSE
[oss-security] 20160429 buffer overflow and information leak in OCaml < 4.03.0
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now