The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4778-1 advisory.

    It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to     steal sensitive information, cause a denial of service (crash), or possibly execute arbitrary code. This     issue only affected Ubuntu 16.04 ESM. (CVE-2015-8869)

    It was discovered that OCaml mishandled crafted input. An attacker could use this vulnerability to cause a     denial of service or possibly execute arbitrary code. (CVE-2018-9838)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202007-48 (OCaml: Arbitrary code execution)

    The caml_ba_deserialize function in byterun/bigarray.c in the standard       library of OCaml has an integer overflow.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for ocaml fixes the following issues :

  - CVE-2018-9838: The caml_ba_deserialize function in     byterun/bigarray.c in the standard library had an     integer overflow which, in situations where marshalled     data is accepted from an untrusted source, allows remote     attackers to cause a denial of service (memory     corruption) or possibly execute arbitrary code via a     crafted object. [bsc#1088591]

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for ocaml fixes the following issues :

  - CVE-2018-9838: Integer overflows when unmarshaling a     bigarray data could result in a bigarray with impossibly     large dimensions leading to overflow when computing the     in-memory size of the bigarray. [bsc#1088591]

This update was imported from the SUSE:SLE-12-SP2:Update update project.

ID	Name	Product	Family	Severity
183175	Ubuntu 16.04 ESM / 18.04 ESM : OCaml vulnerabilities (USN-4778-1)	Nessus	Ubuntu Local Security Checks	critical
138971	GLSA-202007-48 : OCaml: Arbitrary code execution	Nessus	Gentoo Local Security Checks	critical
110337	openSUSE Security Update : ocaml (openSUSE-2018-559)	Nessus	SuSE Local Security Checks	critical
109295	openSUSE Security Update : ocaml (openSUSE-2018-391)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-9838

critical

Tenable Plugins

critical

critical

critical

critical