CVE-2016-4456 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-4456 Interim 1 24 2025-04-22T23:46:08Z current 2021-05-30T13:42:02Z 2025-04-22T23:46:08Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-4456 The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP2 LTSS SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 gnutls libgnutls-devel libgnutls-extra-devel libgnutls-extra26 libgnutls-openssl-devel libgnutls-openssl27 libgnutls26 libgnutls26-32bit libgnutls28 libgnutls28-32bit libgnutlsxx-devel libgnutlsxx28 gnutls as a component of SUSE Linux Enterprise Desktop 12 libgnutls28 as a component of SUSE Linux Enterprise Desktop 12 libgnutls28-32bit as a component of SUSE Linux Enterprise Desktop 12 gnutls as a component of SUSE Linux Enterprise Desktop 12 SP1 libgnutls28 as a component of SUSE Linux Enterprise Desktop 12 SP1 libgnutls28-32bit as a component of SUSE Linux Enterprise Desktop 12 SP1 libgnutls-extra26 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 gnutls as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 gnutls as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata gnutls as a component of SUSE Linux Enterprise Server 11 SP2 LTSS gnutls as a component of SUSE Linux Enterprise Server 11 SP3 LTSS gnutls as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata gnutls as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libgnutls-extra26 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libgnutls26 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libgnutls26-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS gnutls as a component of SUSE Linux Enterprise Server 12 libgnutls-openssl27 as a component of SUSE Linux Enterprise Server 12 libgnutls28 as a component of SUSE Linux Enterprise Server 12 libgnutls28-32bit as a component of SUSE Linux Enterprise Server 12 gnutls as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls-openssl27 as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls28 as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls28-32bit as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgnutls-extra-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgnutls-extra26 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gnutls as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgnutls-devel as a component of SUSE Linux Enterprise Software Development Kit 12 libgnutls-openssl-devel as a component of SUSE Linux Enterprise Software Development Kit 12 libgnutlsxx-devel as a component of SUSE Linux Enterprise Software Development Kit 12 libgnutlsxx28 as a component of SUSE Linux Enterprise Software Development Kit 12 gnutls as a component of SUSE Linux Enterprise Software Development Kit 12 libgnutls-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutls-openssl-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutlsxx-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutlsxx28 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 gnutls as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem. CVE-2016-4456 SUSE Linux Enterprise Desktop 12 SP1:gnutls SUSE Linux Enterprise Desktop 12 SP1:libgnutls28 SUSE Linux Enterprise Desktop 12 SP1:libgnutls28-32bit SUSE Linux Enterprise Desktop 12:gnutls SUSE Linux Enterprise Desktop 12:libgnutls28 SUSE Linux Enterprise Desktop 12:libgnutls28-32bit SUSE Linux Enterprise High Availability Extension 11 SP4:gnutls SUSE Linux Enterprise High Availability Extension 11 SP4:libgnutls-extra26 SUSE Linux Enterprise Server 11 SP1 for Teradata:gnutls SUSE Linux Enterprise Server 11 SP2 LTSS:gnutls SUSE Linux Enterprise Server 11 SP3 LTSS:gnutls SUSE Linux Enterprise Server 11 SP3 for Teradata:gnutls SUSE Linux Enterprise Server 11 SP4-LTSS:gnutls SUSE Linux Enterprise Server 11 SP4-LTSS:libgnutls-extra26 SUSE Linux Enterprise Server 11 SP4-LTSS:libgnutls26 SUSE Linux Enterprise Server 11 SP4-LTSS:libgnutls26-32bit SUSE Linux Enterprise Server 12 SP1:gnutls SUSE Linux Enterprise Server 12 SP1:libgnutls-openssl27 SUSE Linux Enterprise Server 12 SP1:libgnutls28 SUSE Linux Enterprise Server 12 SP1:libgnutls28-32bit SUSE Linux Enterprise Server 12:gnutls SUSE Linux Enterprise Server 12:libgnutls-openssl27 SUSE Linux Enterprise Server 12:libgnutls28 SUSE Linux Enterprise Server 12:libgnutls28-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:gnutls SUSE Linux Enterprise Software Development Kit 11 SP4:libgnutls-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libgnutls-extra-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libgnutls-extra26 SUSE Linux Enterprise Software Development Kit 12 SP1:gnutls SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutls-devel SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutls-openssl-devel SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutlsxx-devel SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutlsxx28 SUSE Linux Enterprise Software Development Kit 12:gnutls SUSE Linux Enterprise Software Development Kit 12:libgnutls-devel SUSE Linux Enterprise Software Development Kit 12:libgnutls-openssl-devel SUSE Linux Enterprise Software Development Kit 12:libgnutlsxx-devel SUSE Linux Enterprise Software Development Kit 12:libgnutlsxx28 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:C/A:N 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N