Chicken
Vendor:
First CVE: Oct 9, 2013 · Active for 12 years
18
Total CVEs
More Total CVEs than 93% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 67% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Chicken over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 9, 2013
12 years ago
Most Recent CVE
Dec 10, 2022
1,324 days ago
CVE Severity & Scoring
Chicken18 CVEs
17%
61%
22%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network14 (77.8%)
Unknown4 (22.2%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (72.2%)
High1 (5.6%)
Unknown4 (22.2%)
User Interaction
None12 (66.7%)
Unknown4 (22.2%)
Required2 (11.1%)
Privileges Required
Low1 (5.6%)
High0 (0.0%)
None13 (72.2%)
Unknown4 (22.2%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6310CRITICAL Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function. | Nov 22, 2019 | 9.8 | 32 | NO | NO |
CVE-2013-2024HIGH OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0. | Oct 31, 2019 | 8.8 | 32 | NO | NO |
CVE-2012-6125CRITICAL Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions. | Oct 31, 2019 | 9.8 | 31 | NO | NO |
CVE-2016-6830CRITICAL The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This | Jan 10, 2017 | 9.8 | 31 | NO | NO |
CVE-2017-6949HIGH An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size woul | Mar 16, 2017 | 8.1 | 27 | NO | NO |
CVE-2012-6122HIGH Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. | Oct 31, 2019 | 7.5 | 25 | NO | NO |
CVE-2017-9334HIGH An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause | Jun 1, 2017 | 7.5 | 25 | NO | NO |
CVE-2022-45145CRITICAL egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file. | Dec 10, 2022 | 9.8 | 24 | NO | NO |
CVE-2017-11343HIGH Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide cr | Jul 17, 2017 | 7.5 | 23 | NO | NO |
CVE-2013-2075HIGH Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service | Oct 31, 2019 | 8.8 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Chicken
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.9.0.1 | 2 | 8.7 | 3.1% | 0 | 0 |
| 4.9.0 | 2 | 8.7 | 3.1% | 0 | 0 |
| 4.8.0.7 | 2 | 6.0 | 2.4% | 0 | 0 |
| 4.8.0.6 | 1 | 4.4 | 0.4% | 0 | 0 |
| 4.8.0.5 | 1 | 4.4 | 0.4% | 0 | 0 |
| 4.8.0.4 | 1 | 4.4 | 0.4% | 0 | 0 |
| 4.8.0.3 | 2 | 6.0 | 1.9% | 0 | 0 |
| 4.8.0.2 | 2 | 6.0 | 1.9% | 0 | 0 |
| 4.8.0.1 | 2 | 6.0 | 1.9% | 0 | 0 |
| 4.8.0 | 2 | 6.0 | 1.9% | 0 | 0 |
| 4.7.4 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.7.3 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.7.2 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.7.0.6 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.7.0 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.6.7 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.6.6 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.6.5 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.6.3 | 1 | 7.5 | 3.4% | 0 | 0 |
| 4.6.2 | 1 | 7.5 | 3.4% | 0 | 0 |