VDB

GCVE-110-MAGEIA-2019-124

GCVE-110-MAGEIA-2019-124
Advisory Published
Vulnetix · Advisory published April 5, 2019
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object. (CVE-2018-9838)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiabtrfs-progs5.2.2-1.mga7 (unaffected), 0 (affected)—
Mageiaocaml4.02.3-6.1.mga6 (unaffected), 0 (affected), 0 (affected), 4.02.3-6.1.mga6 (unaffected)—

Aliases

CVE-2018-9838

References

Updated ocaml packages fix security vulnerability
advisory
Updated ocaml packages fix security vulnerability
issue
Updated ocaml packages fix security vulnerability
issue
Updated ocaml packages fix security vulnerability
issue
Updated ocaml packages fix security vulnerability
issue
Updated btrfs-progs packages fix vaious bugs
advisory
Updated btrfs-progs packages fix vaious bugs
issue

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›