CVE-2016-4456: Input Validation
It was reported that gnutls 3.4.12 uses an environment variable (GNUTLSKEYLOGFILE) to write the keys of the running sessions. This variable is obtained insecurely via getenv(), meaning that any set-uid program using gnutls can be used to overwrite any file on the filesystem.
Upstream patch:
https://gitlab.com/gnutls/gnutls/compare/fb2a6baef79f4aadfd95e657fe5a18da20a1410e...86076c9b17b9a32b348cafb8b724f57f7da64d58
External References:
http://gnutls.org/security.html#GNUTLS-SA-2016-1
Other sources
The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4456?
CVE-2016-4456 has a medium severity level due to potential unauthorized file access.
How do I fix CVE-2016-4456?
To fix CVE-2016-4456, upgrade the gnutls package to version 3.4.13 or later.
What is the impact of CVE-2016-4456?
The impact of CVE-2016-4456 enables a set-uid program using gnutls to overwrite any file on the filesystem.
Which versions of gnutls are affected by CVE-2016-4456?
CVE-2016-4456 affects gnutls version 3.4.12 and earlier.
Is CVE-2016-4456 associated with any specific software?
Yes, CVE-2016-4456 specifically affects the gnutls software package.