OC
Product
OCaml
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add OCaml to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9838 | 9.8 | Apr 6 | The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from… Affected: 4.06.0 |
| CVE-2017-9772 | 9.8 | Jun 23 | Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the… Affected: 4.04.0; 4.04.1 |
| CVE-2015-8869 | 9.1 | Jun 13 | OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a… Affected: through 4.02.3 |
Showing 3
