Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.

The remote host is affected by the vulnerability described in GLSA-201612-54 (Chicken: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chicken. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Latest upstream release. Upstream patch for CVE-2013-4385.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2013-4385.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
96229	GLSA-201612-54 : Chicken: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
72402	Fedora 20 : chicken-4.8.0.5-1.fc20 (2013-22130)	Nessus	Fedora Local Security Checks	high
71081	Fedora 18 : chicken-4.8.0.4-4.fc18 (2013-17912)	Nessus	Fedora Local Security Checks	high
70209	Fedora 19 : chicken-4.8.0.4-4.fc19 (2013-17868)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2013-4385

critical

Tenable Plugins

high

high

high

high