VDB
GCVE-110-MAGEIA-2019-124
GCVE-110-MAGEIA-2019-124
Advisory Published
The caml_ba_deserialize function in byterun/bigarray.c in the standard
library in OCaml 4.06.0 has an integer overflow which, in situations where
marshalled data is accepted from an untrusted source, allows remote
attackers to cause a denial of service (memory corruption) or possibly
execute arbitrary code via a crafted object. (CVE-2018-9838)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | ocaml | 0 (affected), 4.02.3-6.1.mga6 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.