Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAMLCPLUGINS, CAMLNATIVECPLUGINS, or CAMLBYTE_CPLUGINS environment variable.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "camlp4", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "camlp4-extra", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-base", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-base-nox", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-compiler-libs", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-interp", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-mode", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-native-compilers", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-nox", "binary_version": "4.01.0-3ubuntu3" }, { "binary_name": "ocaml-source", "binary_version": "4.01.0-3ubuntu3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ocaml", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-base", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-base-dbgsym", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-base-nox", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-base-nox-dbgsym", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-compiler-libs", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-interp", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-mode", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-native-compilers", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-native-compilers-dbgsym", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-nox", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-nox-dbgsym", "binary_version": "4.02.3-5ubuntu2" }, { "binary_name": "ocaml-source", "binary_version": "4.02.3-5ubuntu2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ocaml", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-base", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-base-dbgsym", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-base-nox", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-base-nox-dbgsym", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-compiler-libs", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-interp", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-mode", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-nox", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-nox-dbgsym", "binary_version": "4.05.0-10ubuntu1" }, { "binary_name": "ocaml-source", "binary_version": "4.05.0-10ubuntu1" } ] }