CVE-2016-7543

Description (CNA)

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://rhn.redhat.com/errata/RHSA-2017-0725.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/
• https://access.redhat.com/errata/RHSA-2017:1931
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/
• http://www.openwall.com/lists/oss-security/2016/09/26/9
• https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html
• http://www.securityfocus.com/bid/93183
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/
• http://www.securitytracker.com/id/1037812
• https://security.gentoo.org/glsa/201701-02

ADP enrichment