CVE-2016-8606 The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU guile | = 2.0.12 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| alpine/guile(Alpine:v3.4) | < 2.0.11-r3 | 2.0.11-r3 |
References
- [oss-security] 20161012 Re: CVE request: GNU Guile <= 2.0.12: REPL server vulnerable to HTTP inter-protocol attacks issue-tracking mailing-list patch third-party-advisory
- 93514 third-party-advisory vdb-entry
- FEDORA-2016-0aab71f552 vendor-advisory
- FEDORA-2016-a47bf58beb vendor-advisory
- FEDORA-2016-34209c3a8e vendor-advisory
- security.alpinelinux.org vendor-advisory