Guile

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-8606 CRITICAL PATCH Act Now

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Authentication Bypass Guile Fedora

NVD

CVSS 3.0

9.8

EPSS

0.3%

CVE-2016-8605 MEDIUM PATCH This Month

The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fedora Guile

NVD

CVSS 3.0

5.3

EPSS

0.1%

CVE-2016-8606

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

RCE Authentication Bypass Guile +1

NVD

CVE-2016-8605

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Fedora Guile

NVD