Maple Labs

CVE search · CVE-2017-9772

CVE-2017-9772

critical 9.8

Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@mitre.org
Weakness
NVD-CWE-noinfo

Severity

VersionScoreVectorSource
CVSS 3.0 critical 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H nvd@nist.govPrimary
CVSS 2.0 high 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References