CVE-2016-6831

High

Published: 10/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The 'process-execute' and 'process-spawn' procedures did not free memory correctly when the execve() call failed, leading to a memory leak. This issue affects all releases of CHICKEN up to and including 4.11.

Risk Assessment

An attacker could exploit this flaw to cause resource exhaustion or denial of service. Organizations may experience availability issues.

Recommendation

It is recommended to upgrade to version 4.12 or 5.0 when they become available to mitigate this vulnerability.

Other vulnerabilities in CHICKEN

CVE-2014-9651High
Buffer overflow in CHICKEN versions 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the 'substring-index[-ci] procedures.'

Original NVD description (English source)

The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).