Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.

The remote host is affected by the vulnerability described in GLSA-201612-54 (Chicken: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chicken. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Fix for CVE-2014-3776 and bump to 4.8.0.6. Latest upstream release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2014-3776.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
96229	GLSA-201612-54 : Chicken: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
77093	Fedora 19 : chicken-4.8.0.6-2.fc19 (2014-6553)	Nessus	Fedora Local Security Checks	Local	high
77092	Fedora 20 : chicken-4.8.0.6-2.fc20 (2014-6551)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2014-3776

critical

Tenable Plugins

high

high

high