CVE-2013-2075

Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for CVE-2012-6122.

• CWE-120

• http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=556108092774086b6c86c2e27daf3f740ffec091
• http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=766056cd5f26b1d529405705449cb534609c113f
• http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=9e2022652258e8a30e5cedbf0abc9cd85a0f6af7
• http://www.openwall.com/lists/oss-security/2013/05/11/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59758Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84188Third Party Advisory, VDB Entry
• https://lists.nongnu.org/archive/html/chicken-announce/2013-05/msg00000.htmlMailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2075Third Party Advisory
• http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=556108092774086b6c86c2e27daf3f740ffec091
• http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=766056cd5f26b1d529405705449cb534609c113f
• http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=9e2022652258e8a30e5cedbf0abc9cd85a0f6af7
• http://www.openwall.com/lists/oss-security/2013/05/11/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59758Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84188Third Party Advisory, VDB Entry
• https://lists.nongnu.org/archive/html/chicken-announce/2013-05/msg00000.htmlMailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2075Third Party Advisory

Published

Oct 31, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2069Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x …
• CVE-2013-2070http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through …
• CVE-2013-2071java/org/apache/catalina/core/AsyncContextImpl.java in Apach…
• CVE-2013-2072Buffer overflow in the Python bindings for the xc_vcpu_setaf…
• CVE-2013-2073Transifex command-line client before 0.9 does not validate X…
• CVE-2013-2074kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier …
• CVE-2013-2076Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processor…
• CVE-2013-2077Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the c…
• CVE-2013-2078Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV gu…
• CVE-2013-2079mod/assign/locallib.php in the assignment module in Moodle 2…
• CVE-2013-2080The core_grade component in Moodle through 2.2.10, 2.3.x bef…
• CVE-2013-2081Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3…