An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by passing an improper list to an application that calls "length" on it.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An incorrect pair? check in the Scheme length procedure results in an unsafe pointer dereference in     all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by     passing an improper list to an application that calls length on it. (CVE-2017-9334)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in
    all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by
    passing an improper list to an application that calls "length" on it. (CVE-2017-9334)

CHICKEN reports :

- CVE-2017-6949: Unchecked malloc() call in SRFI-4 constructors when allocating in non-GC memory, resulting in potential 1-word buffer overrun and/or segfault

- CVE-2017-9334: 'length' crashes on improper lists

- CVE-2017-11343: The randomization factor of the symbol table was set before the random seed was set, causing it to have a fixed value on many platforms

ID	Name	Product	Family	Severity
255136	Linux Distros Unpatched Vulnerability : CVE-2017-9334	Nessus	Misc.	high
403803	Alpine: multiple chicken packages: security update to 4.12.0-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	high
403803	Alpine: multiple chicken packages: security update to 4.12.0-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400848	Alpine: multiple chicken packages: security update to 4.12.0-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400848	Alpine: multiple chicken packages: security update to 4.12.0-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
111655	FreeBSD : chicken -- multiple vulnerabilities (5a771686-9e33-11e8-8b2d-9cf7a8059466)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2017-9334

high

Tenable Plugins

high

high

high

high

high

high