CVE-2016-6831: Call-Cc Chicken

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).

Affected products

• Call-Cc Chicken: up to and including 4.11.0

Published 2017-01-10. Last modified 2026-06-17.