CVE-2016-0634 Command injection in n/a

High 7.5 Published 28 Aug 2017 Updated 4 Oct 2024

Remote authenticated users can execute arbitrary code via shell metacharacters in the hostname due to unsafe prompt expansion in Bash.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-0634?

CVE-2016-0634 is a high-severity command injection vulnerability in n/a, published on 28 Aug 2017. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

Weakness: CWE-78

Which versions are affected by CVE-2016-0634?

It affects 1 product.

Products include Gnu Bash.

How do I fix CVE-2016-0634?

Apply the vendor's patch.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2016-0634 being exploited?

There is no known exploitation of CVE-2016-0634 in the wild and no public exploit code.

Sources

Also known as ALPINE-CVE-2016-0634, CLEANSTART-2026-GG57088, DEBIAN-CVE-2016-0634, GHSA-h2ww-3j54-pccx, UBUNTU-CVE-2016-0634.