CVE-2016-0634

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.02%

Published

Aug 28, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

Weaknesses (CWE)

CWE-78

Affected Products (1)

gnu · bashvulnerable

References (20)

http://rhn.redhat.com/errata/RHSA-2017-0725.html

http://www.openwall.com/lists/oss-security/2016/09/16/12

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/16/8

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/18/11

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/19/7

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/20/1

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/27/9

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/29/27

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/07/6

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/10/3

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/10/4

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/92999

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:1931

https://bugzilla.redhat.com/show_bug.cgi?id=1377613

Issue TrackingPatchThird Party Advisory

https://security.gentoo.org/glsa/201612-39

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0725.html

http://www.openwall.com/lists/oss-security/2016/09/16/12

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/16/8

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/18/11

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/19/7

Mailing ListThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs