csaf_redhat - rhsa-2017

rhsa-2017_0725

Vulnerability from csaf_redhat

Published

2017-03-21 08:42

Modified

2024-11-22 10:28

Summary

Red Hat Security Advisory: bash security and bug fix update

Notes

Topic

An update for bash is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The bash packages provide Bash (Bourne-again shell), which is the default shell for Red Hat Enterprise Linux. Security Fix(es): * An arbitrary command injection flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances. (CVE-2016-0634) * An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local, authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances. (CVE-2016-7543) * A denial of service flaw was found in the way bash handled popd commands. A poorly written shell script could cause bash to crash resulting in a local denial of service limited to a specific bash session. (CVE-2016-9401) Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for bash is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "The bash packages provide Bash (Bourne-again shell), which is the default shell for Red Hat Enterprise Linux.\n\nSecurity Fix(es):\n\n* An arbitrary command injection flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances. (CVE-2016-0634)\n\n* An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local, authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances. (CVE-2016-7543)\n\n* A denial of service flaw was found in the way bash handled popd commands. A poorly written shell script could cause bash to crash resulting in a local denial of service limited to a specific bash session. (CVE-2016-9401)\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2017:0725",
            url: "https://access.redhat.com/errata/RHSA-2017:0725",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html",
            url: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html",
            url: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html",
         },
         {
            category: "external",
            summary: "1377613",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1377613",
         },
         {
            category: "external",
            summary: "1379630",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1379630",
         },
         {
            category: "external",
            summary: "1396383",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1396383",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0725.json",
         },
      ],
      title: "Red Hat Security Advisory: bash security and bug fix update",
      tracking: {
         current_release_date: "2024-11-22T10:28:23+00:00",
         generator: {
            date: "2024-11-22T10:28:23+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2017:0725",
         initial_release_date: "2017-03-21T08:42:42+00:00",
         revision_history: [
            {
               date: "2017-03-21T08:42:42+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2017-03-21T08:42:42+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-22T10:28:23+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Desktop (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Desktop (v. 6)",
                           product_id: "6Client",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::client",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                           product_id: "6Client-optional",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::client",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux HPC Node (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux HPC Node (v. 6)",
                           product_id: "6ComputeNode",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::computenode",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                           product_id: "6ComputeNode-optional",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::computenode",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Server (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Server (v. 6)",
                           product_id: "6Server",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::server",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Server Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Server Optional (v. 6)",
                           product_id: "6Server-optional",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::server",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Workstation (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Workstation (v. 6)",
                           product_id: "6Workstation",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::workstation",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                           product_id: "6Workstation-optional",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:6::workstation",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
                        product: {
                           name: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
                           product_id: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-debuginfo@4.1.2-48.el6?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-0:4.1.2-48.el6.x86_64",
                        product: {
                           name: "bash-0:4.1.2-48.el6.x86_64",
                           product_id: "bash-0:4.1.2-48.el6.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash@4.1.2-48.el6?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-doc-0:4.1.2-48.el6.x86_64",
                        product: {
                           name: "bash-doc-0:4.1.2-48.el6.x86_64",
                           product_id: "bash-doc-0:4.1.2-48.el6.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-doc@4.1.2-48.el6?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bash-debuginfo-0:4.1.2-48.el6.i686",
                        product: {
                           name: "bash-debuginfo-0:4.1.2-48.el6.i686",
                           product_id: "bash-debuginfo-0:4.1.2-48.el6.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-debuginfo@4.1.2-48.el6?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-0:4.1.2-48.el6.i686",
                        product: {
                           name: "bash-0:4.1.2-48.el6.i686",
                           product_id: "bash-0:4.1.2-48.el6.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash@4.1.2-48.el6?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-doc-0:4.1.2-48.el6.i686",
                        product: {
                           name: "bash-doc-0:4.1.2-48.el6.i686",
                           product_id: "bash-doc-0:4.1.2-48.el6.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-doc@4.1.2-48.el6?arch=i686",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bash-0:4.1.2-48.el6.src",
                        product: {
                           name: "bash-0:4.1.2-48.el6.src",
                           product_id: "bash-0:4.1.2-48.el6.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash@4.1.2-48.el6?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bash-doc-0:4.1.2-48.el6.s390x",
                        product: {
                           name: "bash-doc-0:4.1.2-48.el6.s390x",
                           product_id: "bash-doc-0:4.1.2-48.el6.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-doc@4.1.2-48.el6?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-debuginfo-0:4.1.2-48.el6.s390x",
                        product: {
                           name: "bash-debuginfo-0:4.1.2-48.el6.s390x",
                           product_id: "bash-debuginfo-0:4.1.2-48.el6.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-debuginfo@4.1.2-48.el6?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-0:4.1.2-48.el6.s390x",
                        product: {
                           name: "bash-0:4.1.2-48.el6.s390x",
                           product_id: "bash-0:4.1.2-48.el6.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash@4.1.2-48.el6?arch=s390x",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bash-doc-0:4.1.2-48.el6.ppc64",
                        product: {
                           name: "bash-doc-0:4.1.2-48.el6.ppc64",
                           product_id: "bash-doc-0:4.1.2-48.el6.ppc64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-doc@4.1.2-48.el6?arch=ppc64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
                        product: {
                           name: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
                           product_id: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash-debuginfo@4.1.2-48.el6?arch=ppc64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bash-0:4.1.2-48.el6.ppc64",
                        product: {
                           name: "bash-0:4.1.2-48.el6.ppc64",
                           product_id: "bash-0:4.1.2-48.el6.ppc64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bash@4.1.2-48.el6?arch=ppc64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
               product_id: "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Client-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
               product_id: "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
               product_id: "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6ComputeNode-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
               product_id: "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6ComputeNode",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
               product_id: "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Server-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
               product_id: "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
               product_id: "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Workstation-optional",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-0:4.1.2-48.el6.src",
            },
            product_reference: "bash-0:4.1.2-48.el6.src",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-debuginfo-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-debuginfo-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.i686",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.ppc64",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.s390x",
            relates_to_product_reference: "6Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bash-doc-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
               product_id: "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
            },
            product_reference: "bash-doc-0:4.1.2-48.el6.x86_64",
            relates_to_product_reference: "6Workstation",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-0634",
         discovery_date: "2016-09-16T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1377613",
            },
         ],
         notes: [
            {
               category: "description",
               text: "An arbitrary command injection flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "bash: Arbitrary code execution via malicious hostname",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-optional:bash-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-0:4.1.2-48.el6.src",
               "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Client:bash-0:4.1.2-48.el6.i686",
               "6Client:bash-0:4.1.2-48.el6.ppc64",
               "6Client:bash-0:4.1.2-48.el6.s390x",
               "6Client:bash-0:4.1.2-48.el6.src",
               "6Client:bash-0:4.1.2-48.el6.x86_64",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Client:bash-doc-0:4.1.2-48.el6.i686",
               "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Client:bash-doc-0:4.1.2-48.el6.s390x",
               "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-0:4.1.2-48.el6.src",
               "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-0:4.1.2-48.el6.src",
               "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Server:bash-0:4.1.2-48.el6.i686",
               "6Server:bash-0:4.1.2-48.el6.ppc64",
               "6Server:bash-0:4.1.2-48.el6.s390x",
               "6Server:bash-0:4.1.2-48.el6.src",
               "6Server:bash-0:4.1.2-48.el6.x86_64",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Server:bash-doc-0:4.1.2-48.el6.i686",
               "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Server:bash-doc-0:4.1.2-48.el6.s390x",
               "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-0:4.1.2-48.el6.src",
               "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-0:4.1.2-48.el6.i686",
               "6Workstation:bash-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-0:4.1.2-48.el6.src",
               "6Workstation:bash-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
               "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2016-0634",
            },
            {
               category: "external",
               summary: "RHBZ#1377613",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1377613",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2016-0634",
               url: "https://www.cve.org/CVERecord?id=CVE-2016-0634",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-0634",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2016-0634",
            },
         ],
         release_date: "2015-10-16T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2017-03-21T08:42:42+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "6Client-optional:bash-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-0:4.1.2-48.el6.src",
                  "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-0:4.1.2-48.el6.i686",
                  "6Client:bash-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-0:4.1.2-48.el6.s390x",
                  "6Client:bash-0:4.1.2-48.el6.src",
                  "6Client:bash-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-0:4.1.2-48.el6.src",
                  "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-0:4.1.2-48.el6.i686",
                  "6Server:bash-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-0:4.1.2-48.el6.s390x",
                  "6Server:bash-0:4.1.2-48.el6.src",
                  "6Server:bash-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.src",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-0:4.1.2-48.el6.src",
                  "6Workstation:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2017:0725",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "HIGH",
                  accessVector: "LOCAL",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 3.7,
                  confidentialityImpact: "PARTIAL",
                  integrityImpact: "PARTIAL",
                  vectorString: "AV:L/AC:H/Au:N/C:P/I:P/A:P",
                  version: "2.0",
               },
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 4.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-optional:bash-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-0:4.1.2-48.el6.src",
                  "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-0:4.1.2-48.el6.i686",
                  "6Client:bash-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-0:4.1.2-48.el6.s390x",
                  "6Client:bash-0:4.1.2-48.el6.src",
                  "6Client:bash-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-0:4.1.2-48.el6.src",
                  "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-0:4.1.2-48.el6.i686",
                  "6Server:bash-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-0:4.1.2-48.el6.s390x",
                  "6Server:bash-0:4.1.2-48.el6.src",
                  "6Server:bash-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.src",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-0:4.1.2-48.el6.src",
                  "6Workstation:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "bash: Arbitrary code execution via malicious hostname",
      },
      {
         cve: "CVE-2016-7543",
         cwe: {
            id: "CWE-77",
            name: "Improper Neutralization of Special Elements used in a Command ('Command Injection')",
         },
         discovery_date: "2016-09-26T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1379630",
            },
         ],
         notes: [
            {
               category: "description",
               text: "An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local, authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-optional:bash-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-0:4.1.2-48.el6.src",
               "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Client:bash-0:4.1.2-48.el6.i686",
               "6Client:bash-0:4.1.2-48.el6.ppc64",
               "6Client:bash-0:4.1.2-48.el6.s390x",
               "6Client:bash-0:4.1.2-48.el6.src",
               "6Client:bash-0:4.1.2-48.el6.x86_64",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Client:bash-doc-0:4.1.2-48.el6.i686",
               "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Client:bash-doc-0:4.1.2-48.el6.s390x",
               "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-0:4.1.2-48.el6.src",
               "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-0:4.1.2-48.el6.src",
               "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Server:bash-0:4.1.2-48.el6.i686",
               "6Server:bash-0:4.1.2-48.el6.ppc64",
               "6Server:bash-0:4.1.2-48.el6.s390x",
               "6Server:bash-0:4.1.2-48.el6.src",
               "6Server:bash-0:4.1.2-48.el6.x86_64",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Server:bash-doc-0:4.1.2-48.el6.i686",
               "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Server:bash-doc-0:4.1.2-48.el6.s390x",
               "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-0:4.1.2-48.el6.src",
               "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-0:4.1.2-48.el6.i686",
               "6Workstation:bash-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-0:4.1.2-48.el6.src",
               "6Workstation:bash-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
               "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2016-7543",
            },
            {
               category: "external",
               summary: "RHBZ#1379630",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1379630",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2016-7543",
               url: "https://www.cve.org/CVERecord?id=CVE-2016-7543",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7543",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7543",
            },
         ],
         release_date: "2016-09-16T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2017-03-21T08:42:42+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "6Client-optional:bash-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-0:4.1.2-48.el6.src",
                  "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-0:4.1.2-48.el6.i686",
                  "6Client:bash-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-0:4.1.2-48.el6.s390x",
                  "6Client:bash-0:4.1.2-48.el6.src",
                  "6Client:bash-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-0:4.1.2-48.el6.src",
                  "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-0:4.1.2-48.el6.i686",
                  "6Server:bash-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-0:4.1.2-48.el6.s390x",
                  "6Server:bash-0:4.1.2-48.el6.src",
                  "6Server:bash-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.src",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-0:4.1.2-48.el6.src",
                  "6Workstation:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2017:0725",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "MEDIUM",
                  accessVector: "LOCAL",
                  authentication: "NONE",
                  availabilityImpact: "COMPLETE",
                  baseScore: 6.9,
                  confidentialityImpact: "COMPLETE",
                  integrityImpact: "COMPLETE",
                  vectorString: "AV:L/AC:M/Au:N/C:C/I:C/A:C",
                  version: "2.0",
               },
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-optional:bash-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-0:4.1.2-48.el6.src",
                  "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-0:4.1.2-48.el6.i686",
                  "6Client:bash-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-0:4.1.2-48.el6.s390x",
                  "6Client:bash-0:4.1.2-48.el6.src",
                  "6Client:bash-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-0:4.1.2-48.el6.src",
                  "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-0:4.1.2-48.el6.i686",
                  "6Server:bash-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-0:4.1.2-48.el6.s390x",
                  "6Server:bash-0:4.1.2-48.el6.src",
                  "6Server:bash-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.src",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-0:4.1.2-48.el6.src",
                  "6Workstation:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution",
      },
      {
         cve: "CVE-2016-9401",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         discovery_date: "2016-11-17T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1396383",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A denial of service flaw was found in the way bash handled popd commands. A poorly written shell script could cause bash to crash resulting in a local denial of service limited to a specific bash session.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "bash: popd controlled free",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-optional:bash-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-0:4.1.2-48.el6.src",
               "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Client:bash-0:4.1.2-48.el6.i686",
               "6Client:bash-0:4.1.2-48.el6.ppc64",
               "6Client:bash-0:4.1.2-48.el6.s390x",
               "6Client:bash-0:4.1.2-48.el6.src",
               "6Client:bash-0:4.1.2-48.el6.x86_64",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Client:bash-doc-0:4.1.2-48.el6.i686",
               "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Client:bash-doc-0:4.1.2-48.el6.s390x",
               "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
               "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-0:4.1.2-48.el6.src",
               "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
               "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-0:4.1.2-48.el6.src",
               "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Server:bash-0:4.1.2-48.el6.i686",
               "6Server:bash-0:4.1.2-48.el6.ppc64",
               "6Server:bash-0:4.1.2-48.el6.s390x",
               "6Server:bash-0:4.1.2-48.el6.src",
               "6Server:bash-0:4.1.2-48.el6.x86_64",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Server:bash-doc-0:4.1.2-48.el6.i686",
               "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Server:bash-doc-0:4.1.2-48.el6.s390x",
               "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-0:4.1.2-48.el6.src",
               "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
               "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-0:4.1.2-48.el6.i686",
               "6Workstation:bash-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-0:4.1.2-48.el6.src",
               "6Workstation:bash-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
               "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
               "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
               "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
               "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2016-9401",
            },
            {
               category: "external",
               summary: "RHBZ#1396383",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1396383",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2016-9401",
               url: "https://www.cve.org/CVERecord?id=CVE-2016-9401",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9401",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9401",
            },
         ],
         release_date: "2016-11-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2017-03-21T08:42:42+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "6Client-optional:bash-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-0:4.1.2-48.el6.src",
                  "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-0:4.1.2-48.el6.i686",
                  "6Client:bash-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-0:4.1.2-48.el6.s390x",
                  "6Client:bash-0:4.1.2-48.el6.src",
                  "6Client:bash-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-0:4.1.2-48.el6.src",
                  "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-0:4.1.2-48.el6.i686",
                  "6Server:bash-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-0:4.1.2-48.el6.s390x",
                  "6Server:bash-0:4.1.2-48.el6.src",
                  "6Server:bash-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.src",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-0:4.1.2-48.el6.src",
                  "6Workstation:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2017:0725",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "MEDIUM",
                  accessVector: "LOCAL",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 1.9,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:L/AC:M/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-optional:bash-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-0:4.1.2-48.el6.src",
                  "6Client-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-0:4.1.2-48.el6.i686",
                  "6Client:bash-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-0:4.1.2-48.el6.s390x",
                  "6Client:bash-0:4.1.2-48.el6.src",
                  "6Client:bash-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Client:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Client:bash-doc-0:4.1.2-48.el6.i686",
                  "6Client:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Client:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Client:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-0:4.1.2-48.el6.src",
                  "6ComputeNode:bash-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.i686",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.s390x",
                  "6ComputeNode:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-0:4.1.2-48.el6.src",
                  "6Server-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-0:4.1.2-48.el6.i686",
                  "6Server:bash-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-0:4.1.2-48.el6.s390x",
                  "6Server:bash-0:4.1.2-48.el6.src",
                  "6Server:bash-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Server:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Server:bash-doc-0:4.1.2-48.el6.i686",
                  "6Server:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Server:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Server:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.src",
                  "6Workstation-optional:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation-optional:bash-doc-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-0:4.1.2-48.el6.src",
                  "6Workstation:bash-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-debuginfo-0:4.1.2-48.el6.x86_64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.i686",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.ppc64",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.s390x",
                  "6Workstation:bash-doc-0:4.1.2-48.el6.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "bash: popd controlled free",
      },
   ],
}

cve-2016-7543

Vulnerability from cvelistv5

Published

2017-01-19 20:00

Modified

2024-08-06 02:04

Severity ?

Summary

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2017-0725.html	vendor-advisory, x_refsource_REDHAT
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1931	vendor-advisory, x_refsource_REDHAT
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/	vendor-advisory, x_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2016/09/26/9	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/93183	vdb-entry, x_refsource_BID
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1037812	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201701-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:04:54.955Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2017:0725",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
               },
               {
                  name: "FEDORA-2016-5a54fb4784",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/",
               },
               {
                  name: "RHSA-2017:1931",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1931",
               },
               {
                  name: "FEDORA-2016-2c4b5ad64e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/",
               },
               {
                  name: "[oss-security] 20160926 CVE-2016-7543 -- bash SHELLOPTS+PS4",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/26/9",
               },
               {
                  name: "[bug-bash] 20160916 Bash-4.4 Release available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html",
               },
               {
                  name: "93183",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/93183",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115",
               },
               {
                  name: "FEDORA-2016-f84391516d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/",
               },
               {
                  name: "1037812",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037812",
               },
               {
                  name: "GLSA-201701-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-02",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2017:0725",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
            },
            {
               name: "FEDORA-2016-5a54fb4784",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/",
            },
            {
               name: "RHSA-2017:1931",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1931",
            },
            {
               name: "FEDORA-2016-2c4b5ad64e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/",
            },
            {
               name: "[oss-security] 20160926 CVE-2016-7543 -- bash SHELLOPTS+PS4",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/26/9",
            },
            {
               name: "[bug-bash] 20160916 Bash-4.4 Release available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html",
            },
            {
               name: "93183",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/93183",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115",
            },
            {
               name: "FEDORA-2016-f84391516d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/",
            },
            {
               name: "1037812",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037812",
            },
            {
               name: "GLSA-201701-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-02",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-7543",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2017:0725",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
                  },
                  {
                     name: "FEDORA-2016-5a54fb4784",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/",
                  },
                  {
                     name: "RHSA-2017:1931",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1931",
                  },
                  {
                     name: "FEDORA-2016-2c4b5ad64e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/",
                  },
                  {
                     name: "[oss-security] 20160926 CVE-2016-7543 -- bash SHELLOPTS+PS4",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/26/9",
                  },
                  {
                     name: "[bug-bash] 20160916 Bash-4.4 Release available",
                     refsource: "MLIST",
                     url: "https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html",
                  },
                  {
                     name: "93183",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/93183",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115",
                  },
                  {
                     name: "FEDORA-2016-f84391516d",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/",
                  },
                  {
                     name: "1037812",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037812",
                  },
                  {
                     name: "GLSA-201701-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-02",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-7543",
      datePublished: "2017-01-19T20:00:00",
      dateReserved: "2016-09-09T00:00:00",
      dateUpdated: "2024-08-06T02:04:54.955Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-0634

Vulnerability from cvelistv5

Published

2017-08-28 15:00

Modified

2024-10-04 17:00

Severity ?

Summary

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2016/09/27/9	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/16/8	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0725.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/09/29/27	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/20/1	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/92999	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1931	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/10/07/6	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/18/11	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/19/7	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/10/4	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/16/12	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201612-39	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.redhat.com/show_bug.cgi?id=1377613	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/10/10/3	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T22:22:55.842Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20160927 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/27/9",
               },
               {
                  name: "[oss-security] 20160916 CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/16/8",
               },
               {
                  name: "RHSA-2017:0725",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
               },
               {
                  name: "[oss-security] 20160929 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/29/27",
               },
               {
                  name: "[oss-security] 20160920 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/20/1",
               },
               {
                  name: "92999",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/92999",
               },
               {
                  name: "RHSA-2017:1931",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1931",
               },
               {
                  name: "[oss-security] 20161007 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/07/6",
               },
               {
                  name: "[oss-security] 20160918 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/18/11",
               },
               {
                  name: "[oss-security] 20160919 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/19/7",
               },
               {
                  name: "[oss-security] 20161010 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/10/4",
               },
               {
                  name: "[oss-security] 20160916 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/09/16/12",
               },
               {
                  name: "GLSA-201612-39",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201612-39",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1377613",
               },
               {
                  name: "[oss-security] 20161010 RE: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/10/3",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2016-0634",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-04T15:39:15.651571Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-04T17:00:57.944Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-09-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The expansion of '\\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "43595867-4340-4103-b7a2-9a5208d29a85",
            shortName: "oracle",
         },
         references: [
            {
               name: "[oss-security] 20160927 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/27/9",
            },
            {
               name: "[oss-security] 20160916 CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/16/8",
            },
            {
               name: "RHSA-2017:0725",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
            },
            {
               name: "[oss-security] 20160929 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/29/27",
            },
            {
               name: "[oss-security] 20160920 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/20/1",
            },
            {
               name: "92999",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/92999",
            },
            {
               name: "RHSA-2017:1931",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1931",
            },
            {
               name: "[oss-security] 20161007 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/07/6",
            },
            {
               name: "[oss-security] 20160918 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/18/11",
            },
            {
               name: "[oss-security] 20160919 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/19/7",
            },
            {
               name: "[oss-security] 20161010 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/10/4",
            },
            {
               name: "[oss-security] 20160916 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/09/16/12",
            },
            {
               name: "GLSA-201612-39",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201612-39",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1377613",
            },
            {
               name: "[oss-security] 20161010 RE: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/10/3",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert_us@oracle.com",
               ID: "CVE-2016-0634",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The expansion of '\\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20160927 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/27/9",
                  },
                  {
                     name: "[oss-security] 20160916 CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/16/8",
                  },
                  {
                     name: "RHSA-2017:0725",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
                  },
                  {
                     name: "[oss-security] 20160929 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/29/27",
                  },
                  {
                     name: "[oss-security] 20160920 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/20/1",
                  },
                  {
                     name: "92999",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/92999",
                  },
                  {
                     name: "RHSA-2017:1931",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1931",
                  },
                  {
                     name: "[oss-security] 20161007 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/07/6",
                  },
                  {
                     name: "[oss-security] 20160918 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/18/11",
                  },
                  {
                     name: "[oss-security] 20160919 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/19/7",
                  },
                  {
                     name: "[oss-security] 20161010 Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/10/4",
                  },
                  {
                     name: "[oss-security] 20160916 Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/09/16/12",
                  },
                  {
                     name: "GLSA-201612-39",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201612-39",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1377613",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1377613",
                  },
                  {
                     name: "[oss-security] 20161010 RE: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/10/3",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "43595867-4340-4103-b7a2-9a5208d29a85",
      assignerShortName: "oracle",
      cveId: "CVE-2016-0634",
      datePublished: "2017-08-28T15:00:00",
      dateReserved: "2015-12-09T00:00:00",
      dateUpdated: "2024-10-04T17:00:57.944Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-9401

Vulnerability from cvelistv5

Published

2017-01-23 21:00

Modified

2024-08-06 02:50

Severity ?

Summary

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2017-0725.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1931	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/11/17/5	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/11/17/9	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/94398	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201701-02	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:50:37.655Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2017:0725",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
               },
               {
                  name: "RHSA-2017:1931",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1931",
               },
               {
                  name: "[oss-security] 20161117 bash - popd controlled free",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/11/17/5",
               },
               {
                  name: "[oss-security] 20161117 Re: bash - popd controlled free",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/11/17/9",
               },
               {
                  name: "94398",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94398",
               },
               {
                  name: "GLSA-201701-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-02",
               },
               {
                  name: "[debian-lts-announce] 20190325 [SECURITY] [DLA 1726-1] bash security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-11-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-03-25T13:06:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2017:0725",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
            },
            {
               name: "RHSA-2017:1931",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1931",
            },
            {
               name: "[oss-security] 20161117 bash - popd controlled free",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/11/17/5",
            },
            {
               name: "[oss-security] 20161117 Re: bash - popd controlled free",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/11/17/9",
            },
            {
               name: "94398",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94398",
            },
            {
               name: "GLSA-201701-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-02",
            },
            {
               name: "[debian-lts-announce] 20190325 [SECURITY] [DLA 1726-1] bash security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-9401",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2017:0725",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0725.html",
                  },
                  {
                     name: "RHSA-2017:1931",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1931",
                  },
                  {
                     name: "[oss-security] 20161117 bash - popd controlled free",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/11/17/5",
                  },
                  {
                     name: "[oss-security] 20161117 Re: bash - popd controlled free",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/11/17/9",
                  },
                  {
                     name: "94398",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94398",
                  },
                  {
                     name: "GLSA-201701-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-02",
                  },
                  {
                     name: "[debian-lts-announce] 20190325 [SECURITY] [DLA 1726-1] bash security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-9401",
      datePublished: "2017-01-23T21:00:00",
      dateReserved: "2016-11-17T00:00:00",
      dateUpdated: "2024-08-06T02:50:37.655Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2017_0725

Vulnerability from csaf_redhat

cve-2016-7543

Vulnerability from cvelistv5

cve-2016-0634

Vulnerability from cvelistv5

cve-2016-9401

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature