CVE-2016-4456

The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem.
References
Link Resource
http://www.openwall.com/lists/oss-security/2016/06/07/6 Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1343505 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:gnutls:3.4.12:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-08-08 21:29

Updated : 2024-02-28 16:04


NVD link : CVE-2016-4456

Mitre link : CVE-2016-4456

CVE.ORG link : CVE-2016-4456


JSON object : View

Products Affected

gnu

  • gnutls
CWE
CWE-20

Improper Input Validation