The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0137-1 advisory.

  - The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window,     in a multithreaded application, other threads could end up creating files with insecure permissions. For     example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile     2.0.13. Prior versions are affected. (CVE-2016-8605)

  - LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or     output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code     execution during conversion to a different file format. NOTE: in 2.24 and later versions, safe mode is     removed, and the product no longer tries to block code execution when external files are used.
    (CVE-2020-17354)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the guile package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The mkdir procedure of GNU Guile temporarily changed     the process' umask to zero. During that time window, in     a multithreaded application, other threads could end up     creating files with insecure permissions. For example,     mkdir without the optional mode argument would create     directories as 0777. This is fixed in Guile 2.0.13.
    Prior versions are affected.(CVE-2016-8605)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for guile fixes the following issues :

  - CVE-2016-8605: Fixed thread-unsafe umask modification     (bsc#1004221).

This update was imported from the SUSE:SLE-12:Update update project.

This update for guile fixes the following issues :

  - CVE-2016-8605: Fixed thread-unsafe umask modification     (bsc#1004221).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Ludovic Courtes reports :

The REPL server is vulnerable to the HTTP inter-protocol attack

The 'mkdir' procedure of GNU Guile, an implementation of the Scheme programming language, temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions.

Security fix for CVE-2016-8605

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to the latest stable release, which fixes CVE-2016-8605 and CVE-2016-8606.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for guile fixes the following issues :

  - CVE-2016-8606: REPL server vulnerable to HTTP     inter-protocol attacks (bsc#1004226).

  - CVE-2016-8605: Thread-unsafe umask modification     (bsc#1004221).

This update for guile1 fixes the following issue :

  - CVE-2016-8605: Thread-unsafe umask modification     (bsc#1004221).

Several vulnerabilities were discovered in GNU Guile, an implementation of the Scheme programming language. The Common Vulnerabilities and Exposures project identifies the following issues.

CVE-2016-8605: The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions.

CVE-2016-8606: GNU Guile provides a 'REPL server' which is a command prompt that developers can connect to for live coding and debugging purposes. The REPL server is started by the '--listen' command-line option or equivalent API.

It was reported that the REPL server is vulnerable to the HTTP inter-protocol attack.

This constitutes a remote code execution vulnerability for developers running a REPL server that listens on a loopback device or private network. Applications that do not run a REPL server, as is usually the case, are unaffected.

For Debian 7 'Wheezy', these problems have been fixed in version 2.0.5+1-3+deb7u1.

We recommend that you upgrade your guile-2.0 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
177676	openSUSE 15 Security Update : guile1, lilypond (openSUSE-SU-2023:0137-1)	Nessus	SuSE Local Security Checks	high
131578	EulerOS 2.0 SP2 : guile (EulerOS-SA-2019-2424)	Nessus	Huawei Local Security Checks	medium
97279	openSUSE Security Update : guile (openSUSE-2017-259)	Nessus	SuSE Local Security Checks	medium
97044	SUSE SLED12 / SLES12 Security Update : guile (SUSE-SU-2017:0398-1)	Nessus	SuSE Local Security Checks	medium
97042	SUSE SLES11 Security Update : guile (SUSE-SU-2017:0394-1)	Nessus	SuSE Local Security Checks	medium
96994	FreeBSD : guile2 -- multiple vulnerabilities (b4ecf774-eb01-11e6-9ac1-a4badb2f4699)	Nessus	FreeBSD Local Security Checks	critical
96466	Fedora 24 : compat-guile18 (2016-990e2012ea)	Nessus	Fedora Local Security Checks	medium
96465	Fedora 25 : compat-guile18 (2016-6dd3bc37c3)	Nessus	Fedora Local Security Checks	medium
94771	Fedora 25 : 5:guile (2016-0aab71f552)	Nessus	Fedora Local Security Checks	critical
94310	openSUSE Security Update : guile (openSUSE-2016-1235)	Nessus	SuSE Local Security Checks	critical
94307	openSUSE Security Update : guile1 (openSUSE-2016-1232)	Nessus	SuSE Local Security Checks	medium
94306	openSUSE Security Update : guile1 (openSUSE-2016-1231)	Nessus	SuSE Local Security Checks	medium
94210	Fedora 23 : 5:guile (2016-a47bf58beb)	Nessus	Fedora Local Security Checks	critical
94120	Fedora 24 : 5:guile (2016-34209c3a8e)	Nessus	Fedora Local Security Checks	critical
94114	Debian DLA-666-1 : guile-2.0 security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2016-8605

medium

Tenable Plugins

high

medium

medium

medium

medium

critical

medium

medium

critical

critical

medium

medium

critical

critical

critical