CVE-2012-6123
MEDIUMChicken < 4.8.0 - Improper Input Validation via NUL Byte Handling
Title source: llmDescription
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."
References (3)
Core 3
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2012-6123
Broken Link x_refsource_misc
https://access.redhat.com/security/cve/cve-2012-6123
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2013/02/08/2
Scores
CVSS v3
6.5
EPSS
0.0127
EPSS Percentile
66.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-20
Status
published
Products (4)
call-cc/chicken
< 4.8.0
debian/debian_linux
8.0
debian/debian_linux
9.0
debian/debian_linux
10.0
Published
Oct 31, 2019
Tracked Since
Feb 18, 2026