CVE-2016-7543: Input Validation
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
Other sources
Shells running as root inherited PS4 from the environment, allowing PS4 expansion performing command substitution. Local attacker could gain arbitrary code execution via bogus setuid binaries using system()/popen() by specially crafting SHELLOPTS+PS4 environment variables.
Public announcement:
http://seclists.org/oss-sec/2016/q3/617
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7543?
CVE-2016-7543 has been classified as a critical vulnerability due to the potential for local users to execute arbitrary commands with root privileges.
How do I fix CVE-2016-7543?
To remediate CVE-2016-7543, upgrade your Bash version to 4.4 or later.
What versions of Bash are affected by CVE-2016-7543?
CVE-2016-7543 affects Bash versions before 4.4.
Can CVE-2016-7543 be exploited remotely?
CVE-2016-7543 cannot be exploited remotely as it requires local user access to the system.
Which operating systems are affected by CVE-2016-7543?
CVE-2016-7543 affects several Fedora versions, including 23, 24, and 25, along with other systems running vulnerable Bash versions.