SUSE-SU-2018:1398-1: bash&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2018:1398-1 is a vulnerability in bash&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 23-05-2018PublishedVulnerability first disclosed.
- 02-05-2025Last modifiedVulnerability information updated.
Description
Security update for bash This update for bash fixes the following issues: Security issues fixed: - CVE-2016-7543: A code execution possibility via SHELLOPTS+PS4 variable was fixed (bsc#1001299) - CVE-2016-0634: Arbitrary code execution via malicious hostname was fixed (bsc#1000396) Non-security issues fixed: - Fix repeating self-calling of traps due the combination of a non-interactive shell, a trap handler for SIGINT, an external process in the trap handler, and a SIGINT within the trap after the external process runs. (bsc#1086247)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse9 products
- bash&distro=SUSE Enterprise Storage 4< 4.3-83.10.1
- bash&distro=SUSE Linux Enterprise Desktop 12 SP3< 4.3-83.10.1
- bash&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 4.3-83.10.1
- bash&distro=SUSE Linux Enterprise Server 12 SP3< 4.3-83.10.1
- bash&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 4.3-83.10.1
1 vendor · 9 products