Vulnerability in chicken package - SRFI-4 Vector Allocation
Summary
DLA-908-1: chicken - security update. Affects chicken versions < 4.7.0-1+deb7u2. Fixed in 4.7.0-1+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The chicken package is a Scheme-to-C compiler and interpreter that provides a runtime system for executing Scheme programs. It is widely used in various applications and frameworks. The vulnerability affects version 4.7.0-1+deb7u2 of the chicken package in Debian 7 Wheezy.
Vulnerability Detail
The vulnerability in the chicken package arises from the improper sanitization of the size argument during the allocation of SRFI-4 vectors. This flaw can lead to segfaults or buffer overflows when certain sizes are used. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial of service.
How To Fix
Minimum fixed version
4.7.0-1+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chickenTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to apply the recommended fix by upgrading the chicken package to the patched version.
Conclusion
The vulnerability in the chicken package could lead to buffer overflows or segfaults when allocating SRFI-4 vectors. It is crucial to upgrade to the patched version (4.7.0-1+deb7u2) to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for chicken →
FAQ
The chicken package is a Scheme-to-C compiler and interpreter used for executing Scheme programs.
SRFI-4 is a Scheme Request for Implementation that defines procedures for creating and manipulating homogeneous numeric vectors.
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by exploiting the buffer overflow or segfault issues.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will provide real-time alerts for open-source vulnerabilities.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for chicken.
