CVE-2017-9772
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-9772
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9772.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-9772
- Related
- Published
- 2017-06-23T20:29:00Z
- Modified
- 2025-04-20T04:07:26.993032Z
- Downstream
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAMLCPLUGINS, CAMLNATIVECPLUGINS, or CAMLBYTE_CPLUGINS environment variable.
- References