What’s Vulnerable › Vulnerabilities

CVE-2016-4456

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-08 · updated 2026-06-17
• Weakness: CWE-20

Description

The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem.

Affected products

• [UNKNOWN] gnutls: 3.4.12

References

• http://www.openwall.com/lists/oss-security/2016/06/07/6
• https://bugzilla.redhat.com/show_bug.cgi?id=1343505
• http://www.openwall.com/lists/oss-security/2016/06/07/6
• https://bugzilla.redhat.com/show_bug.cgi?id=1343505

Get alerted when CVE-2016-4456 or the next vulnerability affects your stack