Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2017-9772

Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.

  • Published: Jun 23, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-9772
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
ocaml / ocaml 4.04.0 4.04.0.x
ocaml / ocaml 4.04.1 4.04.1.x