The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ocaml: Integer overflow in byterun/bigarray.c:caml_ba_deserialize() allows remote attackers to cause a     denial of service or other unspecified impact (CVE-2018-9838)

  - OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions     predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via     crafted input to an application that maintains a hash table. (CVE-2012-0839)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - ocaml: Integer overflow in byterun/bigarray.c:caml_ba_deserialize() allows remote attackers to cause a     denial of service or other unspecified impact (CVE-2018-9838)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4778-1 advisory.

    It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to     steal sensitive information, cause a denial of service (crash), or possibly execute arbitrary code. This     issue only affected Ubuntu 16.04 ESM. (CVE-2015-8869)

    It was discovered that OCaml mishandled crafted input. An attacker could use this vulnerability to cause a     denial of service or possibly execute arbitrary code. (CVE-2018-9838)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202007-48 (OCaml: Arbitrary code execution)

    The caml_ba_deserialize function in byterun/bigarray.c in the standard       library of OCaml has an integer overflow.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for ocaml fixes the following issues :

  - CVE-2018-9838: The caml_ba_deserialize function in     byterun/bigarray.c in the standard library had an     integer overflow which, in situations where marshalled     data is accepted from an untrusted source, allows remote     attackers to cause a denial of service (memory     corruption) or possibly execute arbitrary code via a     crafted object. [bsc#1088591]

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for ocaml fixes the following issues :

  - CVE-2018-9838: Integer overflows when unmarshaling a     bigarray data could result in a bigarray with impossibly     large dimensions leading to overflow when computing the     in-memory size of the bigarray. [bsc#1088591]

This update was imported from the SUSE:SLE-12-SP2:Update update project.

ID	Name	Product	Family	Severity
200047	RHEL 6 : ocaml (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
200035	RHEL 7 : ocaml (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196275	RHEL 7 : ocaml (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
183175	Ubuntu 16.04 ESM / 18.04 ESM : OCaml vulnerabilities (USN-4778-1)	Nessus	Ubuntu Local Security Checks	critical
138971	GLSA-202007-48 : OCaml: Arbitrary code execution	Nessus	Gentoo Local Security Checks	critical
110337	openSUSE Security Update : ocaml (openSUSE-2018-559)	Nessus	SuSE Local Security Checks	critical
109295	openSUSE Security Update : ocaml (openSUSE-2018-391)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-9838

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical