CVE-2016-0634: OS Command Injection
A vulnerability was found in a way bash expands the $HOSTNAME. Injecting the hostname with malicious code would cause it to run each time bash expanded \h in the prompt string.
References:
http://seclists.org/oss-sec/2016/q3/528
Ubuntu bug:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1507025
Other sources
The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0634?
CVE-2016-0634 is considered a medium severity vulnerability, potentially allowing remote code execution.
How do I fix CVE-2016-0634?
To fix CVE-2016-0634, update GNU Bash to version 4.3 or later.
What systems are affected by CVE-2016-0634?
CVE-2016-0634 affects systems running GNU Bash version 4.3 specifically.
What is the nature of the vulnerability in CVE-2016-0634?
CVE-2016-0634 is a vulnerability in how Bash expands the $HOSTNAME variable, which allows for code injection.
Can CVE-2016-0634 be exploited remotely?
Yes, CVE-2016-0634 can potentially be exploited remotely by manipulating the hostname.