OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 13, 2016 |
| Centos_linux | — | Upgrade ruby-libguestfsUpgrade ocaml-emacsUpgrade libguestfs-debuginfoUpgrade ocaml-x11Upgrade ocamlUpgrade perl-Sys-GuestfsUpgrade ocaml-labltkUpgrade ocaml-sourceUpgrade ocaml-camlp4Upgrade libguestfsUpgrade ocaml-libguestfsUpgrade ocaml-camlp4-develUpgrade ocaml-debuginfoUpgrade ocaml-libguestfs-develUpgrade ocaml-runtimeUpgrade python-libguestfsUpgrade libguestfs-toolsUpgrade libguestfs-develUpgrade libguestfs-javadocUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade ocaml-docsUpgrade libguestfs-java-develUpgrade ocaml-ocamldocUpgrade ocaml-labltk-devel | Jul 22, 2016 | Jun 13, 2016 |
| Debian | — | Upgrade ocaml | Mar 31, 2017 | May 11, 2016 |
| Freebsd | — | Upgrade ocaml | Dec 10, 2025 | May 23, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ocaml. | Oct 30, 2017 | Jun 13, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libguestfsUpgrade libguestfs-tools-cUpgrade libguestfsUpgrade libguestfs-javaUpgrade libguestfs-toolsUpgrade libguestfs-xfs | Nov 30, 2017 | Jun 13, 2016 |
| Oracle_linux | — | Upgrade libguestfs-rescueUpgrade ocaml-ocamldocUpgrade libguestfs-gobjectUpgrade ocaml-emacsUpgrade ocaml-runtimeUpgrade libguestfs-rsyncUpgrade libguestfsUpgrade libguestfs-gobject-docUpgrade libguestfs-develUpgrade ocamlUpgrade ocaml-docsUpgrade libguestfs-man-pages-jaUpgrade ruby-libguestfsUpgrade python-libguestfsUpgrade ocaml-compiler-libsUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade ocaml-libguestfs-develUpgrade libguestfs-inspect-iconsUpgrade perl-Sys-GuestfsUpgrade ocaml-camlp4-develUpgrade libguestfs-javadocUpgrade libguestfs-javaUpgrade ocaml-libguestfsUpgrade libguestfs-man-pages-ukUpgrade lua-guestfsUpgrade ocaml-camlp4Upgrade ocaml-x11Upgrade ocaml-sourceUpgrade virt-dibUpgrade virt-v2vUpgrade libguestfs-bash-completionUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade ocaml-labltkUpgrade libguestfs-gfs2Upgrade ocaml-labltk-develUpgrade libguestfs-tools | Jun 23, 2016 | Jun 13, 2016 |
| Redhat_linux | — | Upgrade python-libguestfsUpgrade ocaml-ocamldocUpgrade ocaml-runtimeUpgrade ruby-libguestfsUpgrade libguestfs-develUpgrade ocaml-libguestfs-develUpgrade libguestfs-tools-cUpgrade ocaml-docsUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade libguestfs-javaUpgrade ocaml-camlp4Upgrade libguestfsUpgrade ocaml-labltkUpgrade libguestfs-javadocUpgrade ocamlUpgrade ocaml-sourceUpgrade ocaml-libguestfsUpgrade libguestfs-debuginfoUpgrade ocaml-debuginfoUpgrade ocaml-emacsUpgrade ocaml-x11Upgrade perl-Sys-GuestfsUpgrade ocaml-camlp4-develUpgrade ocaml-labltk-devel | Jul 29, 2016 | Jun 13, 2016 |
| Suse | — | Upgrade ocaml-ocamldocUpgrade ocaml-compiler-libsUpgrade ocamlUpgrade ocaml-rpm-macrosUpgrade ocaml-runtimeUpgrade ocaml-compiler-libs-devel | Jun 13, 2016 | Jun 13, 2016 |
| Ubuntu | — | Upgrade ocaml-nox (Ubuntu Pro)Upgrade ocaml (Ubuntu Pro)Upgrade ocaml-base (Ubuntu Pro)Upgrade ocamlUpgrade ocaml-base-nox (Ubuntu Pro)Upgrade ocaml-mode (Ubuntu Pro) | Oct 3, 2017 | Jun 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub