vulnerability

CentOS Linux: CVE-2016-0634: Moderate: bash security and bug fix update (Multiple Advisories)

Severity
6
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:P)
Published
Aug 28, 2017
Added
Aug 28, 2019
Modified
May 25, 2023

Description

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

Solutions

centos-upgrade-bashcentos-upgrade-bash-debuginfocentos-upgrade-bash-doc
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.