popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-bash | Aug 30, 2017 | Jan 23, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade-bash | Sep 1, 2017 | Jan 23, 2017 |
| Centos_linux | — | centos-upgrade-bashcentos-upgrade-bash-debuginfocentos-upgrade-bash-doc | Aug 28, 2019 | Jan 23, 2017 |
| Debian | debian-upgrade-bash | Mar 26, 2019 | Jan 23, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-shells-bash | Oct 30, 2017 | Jan 23, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-bash | Nov 30, 2017 | Jan 23, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-bash | Nov 30, 2017 | Jan 23, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-shell-bash-4-4-11-0-175-3-17-0-4-0 | May 29, 2017 | Jan 23, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-bashoracle-linux-upgrade-bash-doc | Mar 28, 2017 | Nov 17, 2016 |
| Redhat_linux | — | redhat-upgrade-bashredhat-upgrade-bash-debuginforedhat-upgrade-bash-doc | Mar 21, 2017 | Jan 23, 2017 |
| Suse | — | suse-upgrade-bashsuse-upgrade-bash-develsuse-upgrade-bash-docsuse-upgrade-bash-langsuse-upgrade-bash-x86suse-upgrade-libreadline5suse-upgrade-libreadline5-32bitsuse-upgrade-libreadline5-x86suse-upgrade-libreadline6suse-upgrade-libreadline6-32bitsuse-upgrade-libreadline7suse-upgrade-libreadline7-32bitsuse-upgrade-readline-develsuse-upgrade-readline-devel-32bitsuse-upgrade-readline-docsuse-upgrade-sles12sp2-docker-image | May 2, 2017 | Jan 23, 2017 |
| Ubuntu | ubuntu-upgrade-bash | May 18, 2017 | Jan 23, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub