GNU Guile
2 CVEs affecting GNU Guile. Latest disclosed: 2017-01-12. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-8606 | Critical | 9.8 | 2017-01-12 | The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack. |
CVE-2016-8605 | Medium | 5.3 | 2017-01-12 | The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could e… |