CVE-2016-0634

ALTO 7.5CVE-2016-0634 · Published 28/08/2017 · updated 17/06/2026

In breve

CVE-2016-0634 è una vulnerabilità ALTO (CVSS 7.5) che riguarda bash (gnu).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.0%, superiore al 93.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
bash gnu	`= 4.3`	No fix yet

Description

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

References

rhn.redhat.com/errata/RHSA-2017-0725.html
openwall.com/lists/oss-security/2016/09/16/12 · Mailing List
openwall.com/lists/oss-security/2016/09/16/8 · Mailing List
openwall.com/lists/oss-security/2016/09/18/11 · Mailing List
openwall.com/lists/oss-security/2016/09/19/7 · Mailing List
openwall.com/lists/oss-security/2016/09/20/1 · Mailing List
openwall.com/lists/oss-security/2016/09/27/9 · Mailing List
openwall.com/lists/oss-security/2016/09/29/27 · Mailing List
openwall.com/lists/oss-security/2016/10/07/6 · Mailing List
openwall.com/lists/oss-security/2016/10/10/3 · Mailing List
openwall.com/lists/oss-security/2016/10/10/4 · Mailing List
securityfocus.com/bid/92999 · Third Party Advisory
access.redhat.com/errata/RHSA-2017:1931
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/201612-39 · Third Party Advisory

Altre vulnerabilità di bash

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free