Back to Database
Status published
Medium
CVE-2012-6123
Chicken before 4.8.0 does not properly handle NUL bytes in...
Vulnerability Description
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-6123
Credits & Attribution
No credits recorded in the NVD database.
References
More from chicken
View All →CVE-2013-2075
Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready,...
High
8.8
CVE-2013-2024
OS command injection vulnerability in the "qs" procedure from the...
High
8.8
CVE-2012-6125
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related...
Critical
9.8
CVE-2012-6124
A casting error in Chicken before 4.8.0 on 64-bit platform...
Medium
5.3
CVE-2012-6122
Buffer overflow in the thread scheduler in Chicken before 4.8.0.1...
High
7.5
Affected Vendor
chicken
View all reports →Affected Software
chicken
Vulnerable Versions:
before 4.8.0
Timeline
Official Publish:
October 31st, 2019
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.