← Back

Inria

inria

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Ocaml
ocaml
1 CVE
Caml Light
caml-light
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-4119
1Inria
1Caml Light
Nov 21, 2024
Oct 26, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
CVE-2012-0839
1Inria
1Ocaml
Apr 29, 2026
Feb 8, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted in...Show more
OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.Show less