CVE-2016-9401

MEDIUM

bash <popd - Use After Free

Title source: llm

Description

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

References (7)

[Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2017-0725.html

[Mailing List, Third Party Advisory] http://www.openwall.com/lists/oss-security/2016/11/17/5

[Mailing List, Third Party Advisory] http://www.openwall.com/lists/oss-security/2016/11/17/9

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/94398

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2017:1931

[Mailing List, Third Party Advisory] https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html

[Third Party Advisory] https://security.gentoo.org/glsa/201701-02

Scores

CVSS v3 5.5

EPSS 0.0006

EPSS Percentile 18.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-416

Status draft

Affected Products (22)

gnu/bash < 4.4

gnu/bash

gnu/bash

gnu/bash

gnu/bash

gnu/bash

debian/debian_linux

redhat/enterprise_linux_desktop

redhat/enterprise_linux_desktop

redhat/enterprise_linux_server

redhat/enterprise_linux_server

redhat/enterprise_linux_server_aus

redhat/enterprise_linux_server_aus

redhat/enterprise_linux_server_aus

redhat/enterprise_linux_server_eus

... and 7 more

Timeline

Published Jan 23, 2017

Tracked Since Feb 18, 2026