CVE-2016-0634

概要

参考情報

• rhn.redhat.com/errata/RHSA-2017-0725.html
• openwall.com/lists/oss-security/2016/09/16/12 · Mailing List
• openwall.com/lists/oss-security/2016/09/16/8 · Mailing List
• openwall.com/lists/oss-security/2016/09/18/11 · Mailing List
• openwall.com/lists/oss-security/2016/09/19/7 · Mailing List
• openwall.com/lists/oss-security/2016/09/20/1 · Mailing List
• openwall.com/lists/oss-security/2016/09/27/9 · Mailing List
• openwall.com/lists/oss-security/2016/09/29/27 · Mailing List
• openwall.com/lists/oss-security/2016/10/07/6 · Mailing List
• openwall.com/lists/oss-security/2016/10/10/3 · Mailing List
• openwall.com/lists/oss-security/2016/10/10/4 · Mailing List
• securityfocus.com/bid/92999 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:1931
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/201612-39 · Third Party Advisory

bash のその他の脆弱性

• CVE-2022-3715高 7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory pro…
• CVE-2019-18276高 7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID …
• CVE-2012-6711高 7.8A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE env…
• CVE-2019-9924高 7.8rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with t…
• CVE-2017-5932高 7.8The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) ch…