CVE-2015-8869

Critical

Published: 13/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

OCaml before 4.03.0 does not properly handle sign extensions, allowing remote attackers to conduct buffer overflow attacks or obtain sensitive information, as demonstrated by a long string to the String.copy function.

Risk Assessment

This vulnerability could lead to serious security breaches, including system compromise or exposure of sensitive data.

Recommendation

It is recommended to upgrade OCaml to version 4.03.0 or later to mitigate this vulnerability.

Original NVD description (English source)

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.