Описание
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
A denial of service flaw was found in the way bash handled popd commands. A poorly written shell script could cause bash to crash resulting in a local denial of service limited to a specific bash session.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | bash | Will not fix | ||
| Red Hat Enterprise Linux 6 | bash | Fixed | RHSA-2017:0725 | 21.03.2017 |
| Red Hat Enterprise Linux 7 | bash | Fixed | RHSA-2017:1931 | 01.08.2017 |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1396383bash: popd controlled free
EPSS
Процентиль: 6%
0.00025
Низкий
3.3 Low
CVSS3
1.9 Low
CVSS2
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 9 лет назад
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
CVSS3: 5.5
nvd
почти 9 лет назад
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
CVSS3: 5.5
debian
почти 9 лет назад
popd in bash might allow local users to bypass the restricted shell an ...
EPSS
Процентиль: 6%
0.00025
Низкий
3.3 Low
CVSS3
1.9 Low
CVSS2