Search CVE reports
1 – 10 of 18 results
(An issue was discovered in the mirage-crypto-ec package before 2.4.0 f ...)
1 affected package
ocaml-mirage-crypto
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml-mirage-crypto | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
(An issue was discovered in the mirage-crypto-ec package before 2.3.0 f ...)
1 affected package
ocaml-mirage-crypto
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml-mirage-crypto | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
(An issue was discovered in the mirage-crypto-pk package before 2.3.0 f ...)
1 affected package
ocaml-mirage-crypto
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml-mirage-crypto | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
(An issue was discovered in the mirage-crypto-ec function before 2.2.0 ...)
1 affected package
ocaml-mirage-crypto
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml-mirage-crypto | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
(An issue was discovered in the mirage-crypto package before 2.2.0 for ...)
1 affected package
ocaml-mirage-crypto
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml-mirage-crypto | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
The cohttp package before 6.3.0 for OCaml allows directory traversal.
1 affected package
ocaml-cohttp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml-cohttp | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the...
4 affected packages
cjson, iperf3, mapcache, sail-ocaml
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| cjson | Vulnerable | Vulnerable | Vulnerable | Vulnerable | — |
| iperf3 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| mapcache | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| sail-ocaml | Needs evaluation | Not in release | Not in release | — | — |
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
1 affected package
ocaml
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml | Not affected | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation...
1 affected package
ocaml
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Some fixes available 3 of 6
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to...
1 affected package
ocaml
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ocaml | — | — | Not affected | Not affected | Fixed |