CVE-2016-6830

Name	CVE-2016-6830
Description	The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
References	DLA-643-1
NVD severity	high (attack range: remote)
Debian Bugs	834845

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
chicken (PTS)	wheezy	4.7.0-1	vulnerable
	wheezy (security)	4.7.0-1+deb7u2	fixed
	jessie	4.9.0.1-1	vulnerable
	buster, sid, stretch	4.11.0-1	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
chicken	source	(unstable)	(unfixed)	high		834845
chicken	source	wheezy	4.7.0-1+deb7u1	high	DLA-643-1

Notes

[stretch] - chicken <no-dsa> (Minor issue)
[jessie] - chicken <no-dsa> (Minor issue)
http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html
https://lists.nongnu.org/archive/html/chicken-hackers/2016-07/txtSWHYeFeG0R.txt
http://bugs.call-cc.org/ticket/1308