{"schemaVersion":3,"id":"CVE-2016-9401","aliases":["ALPINE-CVE-2016-9401","MGASA-2017-0005","SUSE-SU-2017:1317-1","SUSE-SU-2017:1337-1","UBUNTU-CVE-2016-9401","DEBIAN-CVE-2016-9401"],"status":"published","duplicateOf":null,"title":null,"description":"popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.","dates":{"published":"2017-01-23T21:00:00.000Z","modified":"2025-08-06T21:12:45.629Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.2,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.2,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":6.4,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":5.5,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":4.6,"impact":6,"computed":true}]},"epss":{"probability":0.00421,"percentile":0.34981,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":-0.0040000000000000105,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00425},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00421,"percentile":0.34981}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00425,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00421,"percentile":0.34981}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"alpine","product":"bash","name":"bash","label":"bash","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/bash","purlType":"apk","versions":[{"text":"< 4.3.33-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3.42-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3.46-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.33-r2 | < 4.3.42-r5 | < 4.3.46-r5","eol":null,"hubHref":null},{"vendor":"debian","product":"bash","name":"bash","label":"bash","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/bash","purlType":"deb","versions":[{"text":"< 4.4-3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4-3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"bash","name":"bash","label":"bash","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/bash","purlType":"deb","versions":[{"text":"< 4.3-7ubuntu1.7","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3-14ubuntu1.2","noFixRecorded":false,"fixedIn":null},{"text":"< 4.4-5ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-7ubuntu1.7 | < 4.3-14ubuntu1.2 | < 4.4-5ubuntu1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"gnu","product":"bash","name":"bash","label":"bash","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.4","noFixRecorded":false,"fixedIn":null},{"text":"4.4:patch1","noFixRecorded":false,"fixedIn":null},{"text":"4.4:patch2","noFixRecorded":false,"fixedIn":null},{"text":"4.4:patch3","noFixRecorded":false,"fixedIn":null},{"text":"4.4:patch4","noFixRecorded":false,"fixedIn":null},{"text":"4.4:patch5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4 | 4.4:patch1 | 4.4:patch2 | 4.4:patch3 | 4.4:patch4 | 4.4:patch5","eol":null,"hubHref":"/vendor/gnu/bash"},{"vendor":"mageia","product":"bash","name":"bash","label":"bash","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/bash","purlType":"rpm","versions":[{"text":"< 4.3-48.2.1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-48.2.1.mga5","eol":null,"hubHref":null},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus","name":"enterprise linux server aus","label":"enterprise_linux_server_aus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.4","noFixRecorded":false,"fixedIn":null},{"text":"7.6","noFixRecorded":false,"fixedIn":null},{"text":"7.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.4 | 7.6 | 7.7","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus","name":"enterprise linux server eus","label":"enterprise_linux_server_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.4","noFixRecorded":false,"fixedIn":null},{"text":"7.5","noFixRecorded":false,"fixedIn":null},{"text":"7.6","noFixRecorded":false,"fixedIn":null},{"text":"7.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.4 | 7.5 | 7.6 | 7.7","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus","name":"enterprise linux server tus","label":"enterprise_linux_server_tus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6","noFixRecorded":false,"fixedIn":null},{"text":"7.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6 | 7.7","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"bash","label":"bash&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 4.3-82.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-82.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Server 11 SP4","name":"bash","label":"bash&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 3.2-147.35.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2-147.35.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Server 12 SP2","name":"bash","label":"bash&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 4.3-82.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-82.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"bash","label":"bash&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 4.3-82.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-82.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"bash","label":"bash&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 3.2-147.35.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2-147.35.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"bash","label":"bash&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 4.3-82.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-82.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"bash","label":"bash&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 3.2-147.35.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2-147.35.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"bash","label":"bash&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 4.3-82.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-82.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bash&distro=SUSE Linux Enterprise Workstation Extension 12 SP2","name":"bash","label":"bash&distro=SUSE Linux Enterprise Workstation Extension 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bash&distro=SUSE Linux Enterprise Workstation Extension 12 SP2","purlType":"rpm","versions":[{"text":"< 4.3-82.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3-82.1","eol":null,"hubHref":null}],"affectedCount":21,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0725.html","label":"rhn.redhat.com/errata/RHSA-2017-0725.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1931","label":"access.redhat.com/errata/RHSA-2017:1931","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/11/17/5","label":"www.openwall.com/lists/oss-security/2016/11/17/5","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory","REPORT"]},{"url":"http://www.openwall.com/lists/oss-security/2016/11/17/9","label":"www.openwall.com/lists/oss-security/2016/11/17/9","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/94398","label":"www.securityfocus.com/bid/94398","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-02","label":"security.gentoo.org/glsa/201701-02","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory","WEB"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html","label":"lists.debian.org/debian-lts-announce/2019/03/msg00028.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-9401","label":"security.alpinelinux.org/vuln/CVE-2016-9401","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0005.html","label":"advisories.mageia.org/MGASA-2017-0005.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19808","label":"bugs.mageia.org/show_bug.cgi?id=19808","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2016/11/17/9","label":"openwall.com/lists/oss-security/2016/11/17/9","hostname":"openwall.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171317-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171317-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1010845","label":"bugzilla.suse.com/1010845","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1035371","label":"bugzilla.suse.com/1035371","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9401","label":"www.suse.com/security/cve/CVE-2016-9401","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171337-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171337-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1031729","label":"bugzilla.suse.com/1031729","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/976776","label":"bugzilla.suse.com/976776","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2016-9401","label":"ubuntu.com/security/CVE-2016-9401","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3294-1","label":"ubuntu.com/security/notices/USN-3294-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9401","label":"www.cve.org/CVERecord?id=CVE-2016-9401","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9401","label":"security-tracker.debian.org/tracker/CVE-2016-9401","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-1726-1","OPENSUSE-SU-2024:10106-1","RHSA-2017:0725","RHSA-2017:1931","USN-3294-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10106-1","USN-3294-1"]},"timeline":[{"kind":"published","date":"2017-01-23T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-08-06T21:12:45.629Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:07:43.579Z","stale":false,"partial":false}}