CVE-2017-5932 The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.
HighCVSS 7.8
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bash(Debian:12) | < 4.4-3 | 4.4-3 |
| debian/bash(Debian:13) | < 4.4-3 | 4.4-3 |
| debian/bash(Debian:14) | < 4.4-3 | 4.4-3 |
| GNU bash | = 4.4 | No fix listed |
References
- Debian Security Tracker CVE-2017-5932 vendor-advisory
- git.savannah.gnu.org patch third-party-advisory
- [oss-security] 20170207 Re: CVE Request - Code execution vulnerability in GNU/bash v4.4 autocompletion mailing-list patch third-party-advisory
- 96136 third-party-advisory vdb-entry
- [bug-bash] 20170120 Bash-4.4 Official Patch 7 mailing-list patch vendor-advisory