The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade chicken | Aug 22, 2024 | Jan 10, 2017 |
| Debian | — | Upgrade chicken | Mar 31, 2017 | Sep 30, 2016 |
| Freebsd | — | Upgrade chicken | Dec 10, 2025 | Feb 4, 2017 |
| Ubuntu | — | Upgrade chicken | Nov 19, 2024 | Jan 10, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub