PT-2017-9714

Name of the Vulnerable Software and Affected Versions GNU Guile version 2.0.12 Description The issue allows an attacker to execute arbitrary code via an HTTP inter-protocol attack on the REPL server --listen in GNU Guile. Recommendations For GNU Guile version 2.0.12, consider disabling the REPL...

guile2 -- multiple vulnerabilities

Ludovic Courtès reports: The REPL server is vulnerable to the HTTP inter-protocol attack The ‘mkdir’ procedure of GNU Guile, an implementation of the Scheme programming language, temporarily changed the process’ umask to zero. During that time window, in a multithreaded application, other threads...