CVE-2014-9651

High

Published: 28/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Buffer overflow in CHICKEN versions 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the 'substring-index[-ci] procedures.'

Risk Assessment

This vulnerability may lead to unauthorized access or execution of malicious code, posing a serious threat to the security of systems using CHICKEN.

Recommendation

It is recommended to update CHICKEN to versions 4.9.0.2, 4.9.1, or 5.0 to mitigate the risks associated with this vulnerability.

Other vulnerabilities in CHICKEN

CVE-2016-6831High
The 'process-execute' and 'process-spawn' procedures did not free memory correctly when the execve() call failed, leading to a memory leak. This issue affects all releases of CHICKEN up to and including 4.11.

Original NVD description (English source)

Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the "substring-index[-ci] procedures."