Guile

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-8606 Jan 12, 22:59 CRITICAL PATCH Act Now

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass RCE Fedora Guile Gnu +1

NVD

CVSS 3.0

9.8

EPSS

0.3%

CVE-2016-8605 Jan 12, 22:59 MEDIUM PATCH This Month

The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fedora Guile Gnu Fedoraproject

NVD

CVSS 3.0

5.3

EPSS

0.1%

CVE-2016-8606

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

Authentication Bypass RCE Fedora +3

NVD

CVE-2016-8605

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Fedora Guile +2

NVD