Most recent entries from all

Withdrawn: BELL-CVE-2016-0634 — CVE-2016-0634 does not affect BellSoft software

Withdrawn by the publisher.

CLEANSTART-2026-GG57088 — Security fix for CVE-2016-0634 applied in: bash 4.4.12-r1

Affected: CleanStart: bash

Security vulnerability affects the bash package. This issue is resolved in later releases. See references for vulnerability details.

cnvd-2016-07737

EUVD-2026-192655

fkie_cve-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

GHSA-h2ww-3j54-pccx

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

gsd-2016-0634

RHSA-2017:0725 — Red Hat Security Advisory: bash security and bug fix update

bash: Arbitrary code execution via malicious hostname bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution bash: popd controlled free

RHSA-2017:1931 — Red Hat Security Advisory: bash security and bug fix update

bash: Arbitrary code execution via malicious hostname bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution bash: popd controlled free

SUSE-SU-2016:2872-1 — Security update for bash

Security update for bash

UBUNTU-CVE-2016-0634

Affected: Ubuntu:14.04:LTS: bash, Ubuntu:16.04:LTS: bash

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.