Skip to main content

Fedora CVE-2016-7543

HIGH
Improper Input Validation (CWE-20)
2017-01-19 cve@mitre.org
8.4
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
8.4 HIGH
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jan 19, 2017 - 20:59 cve.org
HIGH 8.4

DescriptionCVE.org

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

AnalysisAI

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-20. Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. Affected products include: Gnu Bash, Fedoraproject Fedora. Version information: before 4.4.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Bash

View all
CVE-2014-6271 CRITICAL POC
9.8 Sep 24

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

CVE-2014-6278 HIGH POC
8.8 Sep 30

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

CVE-2014-7169 CRITICAL POC
9.8 Sep 25

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

CVE-2014-7187 CRITICAL POC
10.0 Sep 28

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers t

CVE-2014-7186 CRITICAL POC
10.0 Sep 28

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial o

CVE-2014-6277 CRITICAL POC
10.0 Sep 27

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

CVE-2019-18276 HIGH POC
7.8 Nov 28

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. Rated high severity (CVSS 7.8)

CVE-2016-0634 HIGH
7.5 Aug 28

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via s

CVE-2019-9924 HIGH
7.8 Mar 22

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execut

CVE-2017-5932 HIGH
7.8 Mar 27

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a

CVE-2016-9401 MEDIUM
5.5 Jan 23

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. Ra

CVE-2012-3410 MEDIUM
4.6 Aug 27

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intend

Share

CVE-2016-7543 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy