PT-2017-8493
CVE-2016-4456
·
تاريخ النشر
2016-06-08
·
تاريخ التحديث
2020-06-16
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
gnutls version 3.4.12
Description
The issue allows remote attackers to overwrite and corrupt arbitrary files in the filesystem due to the "GNUTLS KEYLOGFILE" environment variable.
Recommendations
For gnutls version 3.4.12, consider restricting access to the
GNUTLS KEYLOGFILE environment variable to prevent remote attackers from overwriting arbitrary files until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾