[{"CVE":"CVE-2018-9838","severity":"low","public_date":"2018-04-06T00:00:00Z","advisories":[],"bugzilla":"1565468","bugzilla_description":"CVE-2018-9838 ocaml: Integer overflow in byterun/bigarray.c:caml_ba_deserialize() allows remote attackers to cause a denial of service or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-9772","severity":"moderate","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1464920","bugzilla_description":"CVE-2017-9772 ocaml: Insufficient sanitisation allows privilege escalation for setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9772.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-8869","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2017:0565","RHSA-2016:2576","RHSA-2016:1296","RHSA-2017:0564"],"bugzilla":"1332090","bugzilla_description":"CVE-2015-8869 ocaml: sizes arguments are sign-extended from 32 to 64 bits","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-194","affected_packages":["libguestfs-1:1.32.7-3.el7","ocaml-0:3.11.2-5.el6","libguestfs-1:1.20.11-20.el6","ocaml-0:4.01.0-22.7.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8869.json"},{"CVE":"CVE-2012-3514","severity":"moderate","public_date":"2012-02-06T00:00:00Z","advisories":[],"bugzilla":"787890","bugzilla_description":"CVE-2012-3514 ocaml-xml-light: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3514.json"},{"CVE":"CVE-2012-0839","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"787888","bugzilla_description":"CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0839.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"}]