4 matches found
SUSE CVE-2016-4456
The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...
7.5CVSS7.1AI score0.022EPSS
SaveExploits0References3
DEBIAN-CVE-2016-4456
The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...
7.5CVSS9.2AI score0.022EPSS
SaveExploits0References1
CVE-2016-4456
The CVE-2016-4456 issue affects GnuTLS, specifically version 3.4.12. The vulnerability stems from how GNUTLS_KEYLOGFILE is handled via getenv(), which can allow an attacker to overwrite and corrupt arbitrary files in the filesystem. Several connected sources confirm the impact and the affected co...
7.5CVSS7.4AI score0.022EPSS
SaveExploits0References2Affected Software1
20