Use-after-free in bash (Alpine package)



Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2016-9401
CWE-ID CWE-416
Exploitation vector Local
Public exploit N/A
Vulnerable software
 bash (Alpine package)
Operating systems & Components / Operating system package or component

Vendor Alpine Linux Development Team

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Use-after-free

EUVDB-ID: #VU33511

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2016-9401

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

Mitigation

Install update from vendor's website.

Vulnerable software versions

bash (Alpine package): 4.3.33-r1

CPE2.3 External links

https://git.alpinelinux.org/aports/commit/?id=d60bf515aff21d0ef3eb0cfa45d92d5ee725e755
https://git.alpinelinux.org/aports/commit/?id=dd8f9634def3da46637cc5768d6e649e8cfa1093
https://git.alpinelinux.org/aports/commit/?id=c39007352cac9174d8c5520f8a2f76ca78b004d7
https://git.alpinelinux.org/aports/commit/?id=a8d4c6b2ae3c6a9fab61de635621692ded81feac
https://git.alpinelinux.org/aports/commit/?id=88fc2ef0acfc8d5519e18e4f1965ab42eb7243b2
https://git.alpinelinux.org/aports/commit/?id=2399dd2a5a6a24f0f1ac9580ca4683a007cc9d40


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###