[ GLSA 200805-11 ] Chicken: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Chicken: Multiple vulnerabilities (GLSA 200805-11)
Severity: normal
Exploitable: remote
Date: May 12, 2008
Bug(s): #198979
ID: 200805-11

Synopsis


Multiple vulnerabilities in Chicken could result in the execution of
arbitrary code.


Background


Chicken is a Scheme interpreter and native Scheme to C compiler.


Affected Packages

Package: dev-scheme/chicken
Vulnerable: < 3.1.0
Unaffected: >= 3.1.0
Architectures: All supported architectures


Description


Chicken includes a copy of PCRE which is vulnerable to multiple buffer
overflows and memory corruption vulnerabilities (GLSA 200711-30).


Impact


An attacker could entice a user to process specially crafted regular
expressions with Chicken, which could possibly lead to the execution of
arbitrary code, a Denial of Service or the disclosure of sensitive
information.


Workaround


There is no known workaround at this time.


Resolution


All Chicken users should upgrade to the latest version: