CVE-2016-9401
Fixed in a distro release EPSS <1%CVSS 6.2
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
Products: gnu bash, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.2 | bash | 4.3.33-r2 |
| Alpine 3.3 | bash | 4.3.42-r5 |
| Alpine 3.4 | bash | 4.3.42-r5 |
| Alpine 3.5 | bash | 4.3.46-r5 |
| Debian 12 | bash | 4.4-3 |
| Debian 13 | bash | 4.4-3 |
| Debian 14 | bash | 4.4-3 |
| Debian 8 | bash | 4.3-11+deb8u2 |
| Red Hat Enterprise Linux 6 | bash | 0:4.1.2-48.el6 |
| Red Hat Enterprise Linux 6 | bash-debuginfo | 0:4.1.2-48.el6 |
| Red Hat Enterprise Linux 6 | bash-doc | 0:4.1.2-48.el6 |
| Red Hat Enterprise Linux 7 | bash | 0:4.2.46-28.el7 |
| Red Hat Enterprise Linux 7 | bash-debuginfo | 0:4.2.46-28.el7 |
| Red Hat Enterprise Linux 7 | bash-doc | 0:4.2.46-28.el7 |
| SUSE Linux Enterprise Desktop 12 SP2 | bash | 4.3-82.1 |
| SUSE Linux Enterprise Server 11 SP4 | bash | 3.2-147.35.1 |
| SUSE Linux Enterprise Server 12 SP2 | bash | 4.3-82.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | bash | 4.3-82.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | bash | 3.2-147.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | bash | 4.3-82.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | bash | 3.2-147.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | bash | 4.3-82.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | bash | 4.3-82.1 |
| Ubuntu 14.04 LTS | bash | 4.3-7ubuntu1.7 |
| Ubuntu 16.04 LTS | bash | 4.3-14ubuntu1.2 |
| Ubuntu 18.04 LTS | bash | 4.4-5ubuntu1 |
| openSUSE Tumbleweed | bash | 7.0-92.1 |