İçeriğe atla
Noroxi

call-cc kayıtları

call-cc üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%76,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2014-6310
    40Planlayın

    Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function.

    KritikCVSS 9,8İstismar yokEPSS %5

    call-cc · chicken22 Kas 2019

  • CVE-2016-6830
    40Planlayın

    The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment var

    KritikCVSS 9,8İstismar yokEPSS %2

    call-cc · chicken10 Oca 2017

  • CVE-2012-6125
    40Planlayın

    Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.

    KritikCVSS 9,8İstismar yokEPSS %2

    call-cc · chicken31 Eki 2019

  • CVE-2022-45145
    39İzleyin

    egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .eg

    KritikCVSS 9,8İstismar yokEPSS %1

    call-cc · chicken10 Ara 2022

  • CVE-2013-2024
    36İzleyin

    OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

    YüksekCVSS 8,8İstismar yokEPSS %5

    call-cc · chicken31 Eki 2019

  • CVE-2013-2075
    36İzleyin

    Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows

    YüksekCVSS 8,8İstismar yokEPSS %2

    call-cc · chicken31 Eki 2019

  • CVE-2017-6949
    32İzleyin

    An issue was discovered in CHICKEN Scheme through 4.12.0.

    YüksekCVSS 8,1İstismar yokEPSS %1

    call-cc · chicken16 Mar 2017

  • CVE-2014-3776
    31İzleyin

    Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows

    YüksekCVSS 7,5İstismar yokEPSS %4

    call-cc · chicken20 May 2014

  • CVE-2013-4385
    31İzleyin

    Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3

    YüksekCVSS 7,5İstismar yokEPSS %3

    call-cc · chicken9 Eki 2013

  • CVE-2015-8235
    31İzleyin

    Directory traversal vulnerability in Spiffy before 5.4.

    YüksekCVSS 7,5İstismar yokEPSS %3

    call-cc · spiffy7 Haz 2017

  • CVE-2012-6122
    31İzleyin

    Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file de

    YüksekCVSS 7,5İstismar yokEPSS %2

    call-cc · chicken31 Eki 2019

  • CVE-2015-4556
    31İzleyin

    The string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service (c

    YüksekCVSS 7,5İstismar yokEPSS %2

    call-cc · chicken29 Mar 2017

  • CVE-2016-6831
    31İzleyin

    The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak

    YüksekCVSS 7,5İstismar yokEPSS %2

    call-cc · chicken10 Oca 2017

  • CVE-2017-9334
    30İzleyin

    An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to

    YüksekCVSS 7,5İstismar yokEPSS %2

    call-cc · chicken1 Haz 2017

  • CVE-2014-9651
    30İzleyin

    Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a posi

    YüksekCVSS 7,5İstismar yokEPSS %1

    call-cc · chicken28 Ağu 2015

  • CVE-2016-6286
    30İzleyin

    The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers

    YüksekCVSS 7,5İstismar yokEPSS %1

    call-cc · http-client10 Oca 2017

  • CVE-2016-6287
    30İzleyin

    The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even whe

    YüksekCVSS 7,5İstismar yokEPSS %1

    call-cc · http-client10 Oca 2017

  • CVE-2017-11343
    30İzleyin

    Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic compl

    YüksekCVSS 7,5İstismar yokEPSS %1

    call-cc · chicken17 Tem 2017

  • CVE-2012-6123
    26İzleyin

    Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."

    OrtaCVSS 6,5İstismar yokEPSS %1

    call-cc · chicken31 Eki 2019

  • CVE-2012-6124
    21İzleyin

    A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value.

    OrtaCVSS 5,3İstismar yokEPSS %1

    call-cc · chicken31 Eki 2019

  • CVE-2013-1874
    17İzleyin

    Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in

    OrtaCVSS 4,4İstismar yokEPSS %0

    call-cc · chicken29 Eyl 2014