CVE-2016-4456: GNU Gnutls

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem.

Affected products

• GNU Gnutls: version 3.4.12 only

Published 2017-08-08. Last modified 2026-06-17.