Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-7543

Fixed in a distro release EPSS <1%

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

Published 2017-01-19 · CVE record · OSV

Products: gnu bash, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Debian 12bash4.4-1
Debian 13bash4.4-1
Debian 14bash4.4-1
Debian 7bash4.2+dfsg-0.1+deb7u4
Red Hat Enterprise Linux 6bash0:4.1.2-48.el6
Red Hat Enterprise Linux 6bash-debuginfo0:4.1.2-48.el6
Red Hat Enterprise Linux 6bash-doc0:4.1.2-48.el6
Red Hat Enterprise Linux 7bash0:4.2.46-28.el7
Red Hat Enterprise Linux 7bash-debuginfo0:4.2.46-28.el7
Red Hat Enterprise Linux 7bash-doc0:4.2.46-28.el7
SUSE Enterprise Storage 4bash4.3-83.10.1
SUSE Linux Enterprise Desktop 12 SP1bash4.2-82.1
SUSE Linux Enterprise Desktop 12 SP3bash4.3-83.10.1
SUSE Linux Enterprise Server 11 SP4bash3.2-147.29.1
SUSE Linux Enterprise Server 12 SP1bash4.2-82.1
SUSE Linux Enterprise Server 12 SP2-BCLbash4.3-83.10.1
SUSE Linux Enterprise Server 12 SP2-LTSSbash4.3-83.10.1
SUSE Linux Enterprise Server 12 SP3bash4.3-83.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4bash3.2-147.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1bash4.2-82.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2bash4.3-83.10.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3bash4.3-83.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4bash3.2-147.29.1
SUSE Linux Enterprise Software Development Kit 12 SP1bash4.2-82.1
SUSE Linux Enterprise Software Development Kit 12 SP3bash4.3-83.10.1
SUSE Linux Enterprise Workstation Extension 12 SP1bash4.2-82.1
SUSE Linux Enterprise Workstation Extension 12 SP3bash4.3-83.10.1
SUSE OpenStack Cloud 7bash4.3-83.10.1
Ubuntu 14.04 LTSbash4.3-7ubuntu1.7
Ubuntu 16.04 LTSbash4.3-14ubuntu1.2