Red Hat Security AdvisoryRHSA-2017:0565
ocaml security update
Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) ocaml-3.11.2-5.el6, ocaml-camlp4-3.11.2-5.el6, ocaml-camlp4-devel-3.11.2-5.el6 +8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ocaml-3.11.2-5.el6, ocaml-camlp4-3.11.2-5.el6, ocaml-camlp4-devel-3.11.2-5.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) ocaml-3.11.2-5.el6, ocaml-camlp4-3.11.2-5.el6, ocaml-camlp4-devel-3.11.2-5.el6 +8
- Red Hat Enterprise Linux Workstation Optional (v. 6) ocaml-3.11.2-5.el6, ocaml-camlp4-3.11.2-5.el6, ocaml-camlp4-devel-3.11.2-5.el6 +8
Fixes 1 record
Priority MEDIUM 47
OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.05313 · Published 2016-06-13 · Fixed CWE-119
