Vulnerabilities > Call CC > Chicken

DATE CVE VULNERABILITY TITLE RISK
2017-03-29 CVE-2015-4556 Improper Input Validation vulnerability in Call-Cc Chicken 4.8.0/4.9.0
The string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service (crash).
network
low complexity
call-cc CWE-20
7.5
2017-03-16 CVE-2017-6949 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Call-Cc Chicken 4.12.0
An issue was discovered in CHICKEN Scheme through 4.12.0.
network
high complexity
call-cc CWE-119
8.1
2017-01-10 CVE-2016-6831 Resource Exhaustion vulnerability in Call-Cc Chicken
The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak.
network
low complexity
call-cc CWE-400
7.5
2017-01-10 CVE-2016-6830 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Call-Cc Chicken
The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call.
network
low complexity
call-cc CWE-119
critical
9.8