CVE-2016-7543: Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables

High severity · published Jan 19, 2017

CVE-2016-7543

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables

8.4

CVSS

0.6%

EPSS

On KEV

Description

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.6% · higher than 47% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Bash · Gnu

through 4.3 · source: NVD

Fedora · Fedoraproject

23; 24; 25 · source: NVD

Affected product

Fedora

Fedoraproject

All Fedora CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-7543

CVE.org

https://www.cve.org/CVERecord?id=CVE-2016-7543

rhn.redhat.com

http://rhn.redhat.com/errata/RHSA-2017-0725.html

Mailing List

http://www.openwall.com/lists/oss-security/2016/09/26/9

Third Party Advisory

http://www.securityfocus.com/bid/93183

www.securitytracker.com

http://www.securitytracker.com/id/1037812

access.redhat.com

https://access.redhat.com/errata/RHSA-2017:1931

h20566.www2.hpe.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115