OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 13, 2016 |
| Centos_linux | — | Upgrade libguestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade ocaml-libguestfs-develUpgrade ocaml-x11Upgrade ocaml-camlp4Upgrade ocaml-libguestfsUpgrade ocaml-camlp4-develUpgrade ocaml-emacsUpgrade ocamlUpgrade libguestfsUpgrade ocaml-debuginfoUpgrade ruby-libguestfsUpgrade ocaml-sourceUpgrade ocaml-labltkUpgrade ocaml-ocamldocUpgrade ocaml-labltk-develUpgrade python-libguestfsUpgrade ocaml-docsUpgrade ocaml-runtimeUpgrade libguestfs-tools-cUpgrade libguestfs-javadocUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade libguestfs-toolsUpgrade libguestfs-java-devel | Jul 22, 2016 | Jun 13, 2016 |
| Debian | — | Upgrade ocaml | Mar 31, 2017 | May 11, 2016 |
| Freebsd | — | Upgrade ocaml | Dec 10, 2025 | May 23, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ocaml. | Oct 30, 2017 | Jun 13, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade python-libguestfsUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade libguestfs | Nov 30, 2017 | Jun 13, 2016 |
| Oracle_linux | — | Upgrade libguestfs-tools-cUpgrade perl-Sys-GuestfsUpgrade libguestfs-inspect-iconsUpgrade libguestfs-man-pages-jaUpgrade ocaml-camlp4-develUpgrade ocaml-ocamldocUpgrade libguestfs-rsyncUpgrade python-libguestfsUpgrade ocaml-runtimeUpgrade libguestfs-rescueUpgrade ocaml-emacsUpgrade ocaml-libguestfs-develUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade libguestfs-gobjectUpgrade libguestfsUpgrade ruby-libguestfsUpgrade libguestfs-gobject-docUpgrade ocamlUpgrade ocaml-compiler-libsUpgrade ocaml-docsUpgrade libguestfs-javadocUpgrade ocaml-x11Upgrade ocaml-sourceUpgrade ocaml-labltkUpgrade ocaml-libguestfsUpgrade libguestfs-man-pages-ukUpgrade libguestfs-javaUpgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade libguestfs-bash-completionUpgrade ocaml-camlp4Upgrade lua-guestfsUpgrade libguestfs-gobject-develUpgrade libguestfs-gfs2Upgrade virt-dibUpgrade virt-v2vUpgrade ocaml-labltk-devel | Jun 23, 2016 | Jun 13, 2016 |
| Redhat_linux | — | Upgrade ruby-libguestfsUpgrade ocaml-runtimeUpgrade ocaml-docsUpgrade libguestfs-javaUpgrade ocaml-ocamldocUpgrade ocaml-libguestfs-develUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade libguestfs-develUpgrade python-libguestfsUpgrade libguestfsUpgrade ocaml-camlp4-develUpgrade ocaml-x11Upgrade ocaml-libguestfsUpgrade ocaml-labltkUpgrade ocaml-emacsUpgrade ocaml-camlp4Upgrade perl-Sys-GuestfsUpgrade libguestfs-debuginfoUpgrade ocaml-labltk-develUpgrade ocamlUpgrade libguestfs-javadocUpgrade ocaml-sourceUpgrade ocaml-debuginfo | Jul 29, 2016 | Jun 13, 2016 |
| Suse | — | Upgrade ocamlUpgrade ocaml-runtimeUpgrade ocaml-compiler-libs-develUpgrade ocaml-ocamldocUpgrade ocaml-rpm-macrosUpgrade ocaml-compiler-libs | Jun 13, 2016 | Jun 13, 2016 |
| Ubuntu | — | Upgrade ocaml-base (Ubuntu Pro)Upgrade ocaml-nox (Ubuntu Pro)Upgrade ocaml (Ubuntu Pro)Upgrade ocaml-mode (Ubuntu Pro)Upgrade ocamlUpgrade ocaml-base-nox (Ubuntu Pro) | Oct 3, 2017 | Jun 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub