Skip to content
Noroxi

call-cc records

21 published records for vendor call-cc.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
76.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2014-6310
    40Plan

    Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function.

    CriticalCVSS 9.8No exploitEPSS 4%

    call-cc · chickenNov 22, 2019

  • CVE-2016-6830
    40Plan

    The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment var

    CriticalCVSS 9.8No exploitEPSS 2%

    call-cc · chickenJan 10, 2017

  • CVE-2012-6125
    40Plan

    Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.

    CriticalCVSS 9.8No exploitEPSS 1%

    call-cc · chickenOct 31, 2019

  • CVE-2022-45145
    39Monitor

    egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .eg

    CriticalCVSS 9.8No exploitEPSS 1%

    call-cc · chickenDec 10, 2022

  • CVE-2013-2024
    36Monitor

    OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

    HighCVSS 8.8No exploitEPSS 4%

    call-cc · chickenOct 31, 2019

  • CVE-2013-2075
    36Monitor

    Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows

    HighCVSS 8.8No exploitEPSS 2%

    call-cc · chickenOct 31, 2019

  • CVE-2017-6949
    32Monitor

    An issue was discovered in CHICKEN Scheme through 4.12.0.

    HighCVSS 8.1No exploitEPSS 1%

    call-cc · chickenMar 16, 2017

  • CVE-2014-3776
    31Monitor

    Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows

    HighCVSS 7.5No exploitEPSS 4%

    call-cc · chickenMay 20, 2014

  • CVE-2013-4385
    31Monitor

    Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3

    HighCVSS 7.5No exploitEPSS 3%

    call-cc · chickenOct 9, 2013

  • CVE-2015-8235
    31Monitor

    Directory traversal vulnerability in Spiffy before 5.4.

    HighCVSS 7.5No exploitEPSS 3%

    call-cc · spiffyJun 7, 2017

  • CVE-2012-6122
    31Monitor

    Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file de

    HighCVSS 7.5No exploitEPSS 2%

    call-cc · chickenOct 31, 2019

  • CVE-2015-4556
    31Monitor

    The string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service (c

    HighCVSS 7.5No exploitEPSS 2%

    call-cc · chickenMar 29, 2017

  • CVE-2016-6831
    31Monitor

    The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak

    HighCVSS 7.5No exploitEPSS 1%

    call-cc · chickenJan 10, 2017

  • CVE-2017-9334
    30Monitor

    An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to

    HighCVSS 7.5No exploitEPSS 1%

    call-cc · chickenJun 1, 2017

  • CVE-2014-9651
    30Monitor

    Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a posi

    HighCVSS 7.5No exploitEPSS 1%

    call-cc · chickenAug 28, 2015

  • CVE-2016-6286
    30Monitor

    The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers

    HighCVSS 7.5No exploitEPSS 1%

    call-cc · http-clientJan 10, 2017

  • CVE-2016-6287
    30Monitor

    The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even whe

    HighCVSS 7.5No exploitEPSS 1%

    call-cc · http-clientJan 10, 2017

  • CVE-2017-11343
    30Monitor

    Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic compl

    HighCVSS 7.5No exploitEPSS 0%

    call-cc · chickenJul 17, 2017

  • CVE-2012-6123
    26Monitor

    Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."

    MediumCVSS 6.5No exploitEPSS 1%

    call-cc · chickenOct 31, 2019

  • CVE-2012-6124
    21Monitor

    A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value.

    MediumCVSS 5.3No exploitEPSS 1%

    call-cc · chickenOct 31, 2019

  • CVE-2013-1874
    17Monitor

    Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in

    MediumCVSS 4.4No exploitEPSS 0%

    call-cc · chickenSep 29, 2014