CVE-2016-8606

GNU Guile 2.0.12’s REPL server --listen is vulnerable to an HTTP inter-protocol attack that can lead to remote arbitrary code execution when the REPL server is bound to a loopback or private network. Multiple external sources (Arch Linux ASA, Debian security tracker, and F5 advisory) confirm CVE-...