Skip to content
OpenAdvisories
Unscored USN-3437-1 1 CVE

ocaml vulnerability

Published Oct 3, 2017 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Radek Micek discovered that OCaml incorrectly handled sign extensions. A
remote attacker could use this issue to cause applications using OCaml to
crash, to possibly obtain sensitive information, or to possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS ocaml 4.01.0-3ubuntu3.1

Vulnerabilities 1

  • Unscored —
    CVE-2015-8869

    OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow …

    ocaml ocaml Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-8869