CVE-2016-0634

Опубликовано: 28 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 6

EPSS Низкий

Описание

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

Ссылки

http://rhn.redhat.com/errata/RHSA-2017-0725.html
http://www.openwall.com/lists/oss-security/2016/09/16/12
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/16/8
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/18/11
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/19/7
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/27/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/29/27
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/07/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/10/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/10/4
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/92999
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1931
https://bugzilla.redhat.com/show_bug.cgi?id=1377613
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://security.gentoo.org/glsa/201612-39
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0725.html
http://www.openwall.com/lists/oss-security/2016/09/16/12
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/16/8
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/18/11
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/19/7
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:bash:4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01448

Низкий

7.5 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2016-0634

CVSS3: 7.5

ubuntu

около 8 лет назад

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

CVE-2016-0634

CVSS3: 4.9

redhat

около 10 лет назад

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

CVE-2016-0634

CVSS3: 7.5

debian

около 8 лет назад

The expansion of '\h' in the prompt string in bash 4.3 allows remote a ...

GHSA-h2ww-3j54-pccx

CVSS3: 7.5

github

больше 3 лет назад

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

openSUSE-SU-2018:1419-1

suse-cvrf

больше 7 лет назад

Security update for bash

EPSS

Процентиль: 80%

0.01448

Низкий

7.5 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-78