Required CVE Record Information
Description
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.
References 4 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- https://caml.inria.fr/mantis/view.php?id=7557 x_transferred
- https://sympa.inria.fr/sympa/arc/caml-list/2017-06/msg00094.html x_transferred
- securityfocus.com: 99277 vdb-entryx_transferred
- security.gentoo.org: GLSA-201710-07 vendor-advisoryx_transferred