CVE-2015-8869
An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak.
Find out more about CVE-2015-8869 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 4.4 |
|---|---|
| Base Metrics | AV:L/AC:M/Au:N/C:P/I:P/A:P |
| Access Vector | Local |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | Partial |
| Availability Impact | Partial |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 7 (ocaml) | RHSA-2016:1296 | 2016-06-23 |
| Red Hat Enterprise Linux 6 (ocaml) | RHSA-2017:0565 | 2017-03-21 |
| Red Hat Enterprise Linux 6 (libguestfs) | RHSA-2017:0564 | 2017-03-21 |
| Red Hat Enterprise Linux 7 (libguestfs) | RHSA-2016:2576 | 2016-11-03 |