CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

SUSE CVE•added 2023/02/15 5:2 a.m.•0 views

SUSE CVE-2016-4456

The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...

7.5CVSS7.1AI score0.00246EPSS

Exploits0References3

OSV•added 2017/08/08 9:29 p.m.•1 views

DEBIAN-CVE-2016-4456

The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...

7.5CVSS9.2AI score0.00246EPSS

Exploits0References1

CVE•added 2017/08/08 9:0 p.m.•84 views

CVE-2016-4456

The CVE-2016-4456 issue affects GnuTLS, specifically version 3.4.12. The vulnerability stems from how GNUTLS_KEYLOGFILE is handled via getenv(), which can allow an attacker to overwrite and corrupt arbitrary files in the filesystem. Several connected sources confirm the impact and the affected co...

7.5CVSS7.4AI score0.00246EPSS

Exploits0References2Affected Software1