OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 13, 2016 |
| Centos_linux | — | Upgrade libguestfs-tools-cUpgrade libguestfs-javadocUpgrade libguestfs-javaUpgrade ocaml-docsUpgrade ocaml-ocamldocUpgrade ocaml-runtimeUpgrade libguestfs-develUpgrade python-libguestfsUpgrade ocaml-labltk-develUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade ocaml-sourceUpgrade ocaml-labltkUpgrade ocaml-emacsUpgrade ocaml-debuginfoUpgrade ocaml-libguestfsUpgrade perl-Sys-GuestfsUpgrade libguestfsUpgrade ocaml-libguestfs-develUpgrade libguestfs-debuginfoUpgrade ocaml-camlp4-develUpgrade ocaml-x11Upgrade ocamlUpgrade ocaml-camlp4Upgrade ruby-libguestfs | Jul 22, 2016 | Jun 13, 2016 |
| Debian | — | Upgrade ocaml | Mar 31, 2017 | May 11, 2016 |
| Freebsd | — | Upgrade ocaml | Dec 10, 2025 | May 23, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ocaml. | Oct 30, 2017 | Jun 13, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade libguestfsUpgrade libguestfs-javaUpgrade libguestfs-tools-cUpgrade python-libguestfs | Nov 30, 2017 | Jun 13, 2016 |
| Oracle_linux | — | Upgrade libguestfs-gobject-docUpgrade ocaml-compiler-libsUpgrade python-libguestfsUpgrade ocaml-camlp4-develUpgrade ocaml-runtimeUpgrade ruby-libguestfsUpgrade ocaml-emacsUpgrade ocaml-ocamldocUpgrade libguestfsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobjectUpgrade libguestfs-rsyncUpgrade perl-Sys-GuestfsUpgrade ocamlUpgrade libguestfs-inspect-iconsUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade ocaml-docsUpgrade ocaml-libguestfs-develUpgrade libguestfs-rescueUpgrade libguestfs-tools-cUpgrade lua-guestfsUpgrade libguestfs-javaUpgrade ocaml-camlp4Upgrade libguestfs-toolsUpgrade virt-v2vUpgrade ocaml-x11Upgrade libguestfs-xfsUpgrade ocaml-sourceUpgrade libguestfs-bash-completionUpgrade virt-dibUpgrade libguestfs-man-pages-ukUpgrade ocaml-labltkUpgrade libguestfs-gfs2Upgrade libguestfs-gobject-develUpgrade ocaml-labltk-develUpgrade ocaml-libguestfsUpgrade libguestfs-javadoc | Jun 23, 2016 | Jun 13, 2016 |
| Redhat_linux | — | Upgrade ocaml-libguestfsUpgrade ocaml-sourceUpgrade ocaml-camlp4-develUpgrade ocaml-labltkUpgrade libguestfsUpgrade ocaml-camlp4Upgrade ocaml-labltk-develUpgrade ocamlUpgrade ocaml-x11Upgrade libguestfs-debuginfoUpgrade libguestfs-javadocUpgrade perl-Sys-GuestfsUpgrade ocaml-debuginfoUpgrade ocaml-emacsUpgrade libguestfs-tools-cUpgrade python-libguestfsUpgrade ocaml-ocamldocUpgrade ocaml-docsUpgrade ocaml-libguestfs-develUpgrade libguestfs-java-develUpgrade libguestfs-toolsUpgrade ruby-libguestfsUpgrade ocaml-runtimeUpgrade libguestfs-develUpgrade libguestfs-java | Jul 29, 2016 | Jun 13, 2016 |
| Suse | — | Upgrade ocaml-compiler-libsUpgrade ocaml-ocamldocUpgrade ocamlUpgrade ocaml-compiler-libs-develUpgrade ocaml-rpm-macrosUpgrade ocaml-runtime | Jun 13, 2016 | Jun 13, 2016 |
| Ubuntu | — | Upgrade ocaml-base (Ubuntu Pro)Upgrade ocaml-nox (Ubuntu Pro)Upgrade ocaml (Ubuntu Pro)Upgrade ocaml-mode (Ubuntu Pro)Upgrade ocamlUpgrade ocaml-base-nox (Ubuntu Pro) | Oct 3, 2017 | Jun 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub