CVE-2016-8606

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.

• CWE-284

• http://www.openwall.com/lists/oss-security/2016/10/12/2Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93514Third Party Advisory, VDB Entry
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QTAGSDCTYXTABAA77BQJGNKOOBRV4DK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNVE5N24FLWDYBQ3LAFMF6BFCWKDO7VM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJP5S36GTXMDEBXWF6LKKV76DSLNQG44/
• http://www.openwall.com/lists/oss-security/2016/10/12/2Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93514Third Party Advisory, VDB Entry
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QTAGSDCTYXTABAA77BQJGNKOOBRV4DK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNVE5N24FLWDYBQ3LAFMF6BFCWKDO7VM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJP5S36GTXMDEBXWF6LKKV76DSLNQG44/

Published

Jan 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8597Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the l…
• CVE-2016-8598Buffer overflow in the zmq interface in csp_if_zmqhub.c in t…
• CVE-2016-8600In dotCMS 3.2.1, attacker can load captcha once, fill it wit…
• CVE-2016-8601Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8602The .sethalftone5 function in psi/zht2.c in Ghostscript befo…
• CVE-2016-8605The mkdir procedure of GNU Guile temporarily changed the pro…
• CVE-2016-8608JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS …5.4
• CVE-2016-8609It was found that the keycloak before 2.3.0 did not implemen…3.7
• CVE-2016-8610A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, …7.5
• CVE-2016-8611A vulnerability was found in Openstack Glance. No limits are…4.3
• CVE-2016-8612Apache HTTP Server mod_cluster before version httpd 2.4.23 i…
• CVE-2016-8613A flaw was found in foreman 1.5.1. The remote execution plug…6.4