GCVE - cpe:2.3:a:chicken:chicken:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:chicken:chicken:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Chicken (`9085a04d-795b-5c10-8ace-d2441fc7b6a7`)
Product	Chicken (`09952624-0672-53bb-ae7f-a6aaab9cda7b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2075`	vulnerable	2026-06-08 05:03:58.273144	Details available Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for CVE-2012-6122. Published: 2019-10-31T20:38:26.000Z Updated: 2024-08-06T15:27:40.560Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/05/11/3 https://security-tracker.debian.org/tracker/CVE-2013-2075 http://www.securityfocus.com/bid/59758 https://exchange.xforce.ibmcloud.com/vulnerabilities/84188 https://lists.nongnu.org/archive/html/chicken-announce/2013-05/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2024`	vulnerable	2026-06-08 05:03:57.923837	Details available OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0. Published: 2019-10-31T19:57:23.000Z Updated: 2024-08-06T15:20:37.412Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-2024 https://access.redhat.com/security/cve/cve-2013-2024 http://www.securityfocus.com/bid/59320 http://www.openwall.com/lists/oss-security/2013/04/29/13 https://exchange.xforce.ibmcloud.com/vulnerabilities/85064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6125`	vulnerable	2026-06-08 05:02:59.577884	Details available Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions. Published: 2019-10-31T20:38:48.000Z Updated: 2024-08-06T21:28:39.307Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/02/08/2 https://security-tracker.debian.org/tracker/CVE-2012-6125 https://access.redhat.com/security/cve/cve-2012-6125 https://lists.nongnu.org/archive/html/chicken-hackers/2012-01/msg00002.html https://lists.nongnu.org/archive/html/chicken-hackers/2012-01/msg00020.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6124`	vulnerable	2026-06-08 05:02:59.575862	Details available A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes (and is advertised as being unsuitable)." Published: 2019-10-31T20:38:43.000Z Updated: 2024-08-06T21:28:39.540Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/02/08/2 https://security-tracker.debian.org/tracker/CVE-2012-6124 https://access.redhat.com/security/cve/cve-2012-6124 https://lists.nongnu.org/archive/html/chicken-hackers/2012-02/msg00084.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6123`	vulnerable	2026-06-08 05:02:59.575427	Details available Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack." Published: 2019-10-31T20:38:39.000Z Updated: 2024-08-06T21:28:39.385Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2012-6123 https://access.redhat.com/security/cve/cve-2012-6123 http://www.openwall.com/lists/oss-security/2013/02/08/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6122`	vulnerable	2026-06-08 05:02:59.574089	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Chicken

Notes

PURL mappings

Vulnerability references

Contribute