Skip to content

CVE-2016-4456

CVE-2016-4456

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem.

CVSS 7.5 · High · EPSS 2.2% · Fix available

Published: 2017-08-08T21:00:00.000Z
Updated: 2024-08-06T00:32:25.569Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
gnutls28 Debian:12
Affected ranges
- ECOSYSTEM: < 3.4.13-1
Update to 3.4.13-1
gnutls28 Debian:13
Affected ranges
- ECOSYSTEM: < 3.4.13-1
Update to 3.4.13-1
gnutls28 Debian:14
Affected ranges
- ECOSYSTEM: < 3.4.13-1
Update to 3.4.13-1

Original sources

Check your server →