5 matches found
SUSE CVE-2016-4456
The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...
DEBIAN-CVE-2016-4456
The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...
CVE-2016-4456
The CVE-2016-4456 issue affects GnuTLS, specifically version 3.4.12. The vulnerability stems from how GNUTLS_KEYLOGFILE is handled via getenv(), which can allow an attacker to overwrite and corrupt arbitrary files in the filesystem. Several connected sources confirm the impact and the affected co...
PT-2017-8493
Name of the Vulnerable Software and Affected Versions gnutls version 3.4.12 Description The issue allows remote attackers to overwrite and corrupt arbitrary files in the filesystem due to the "GNUTLS KEYLOGFILE" environment variable. Recommendations For gnutls version 3.4.12, consider restricting...
