CVE-2016-7543

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

• CWE-20

• http://rhn.redhat.com/errata/RHSA-2017-0725.html
• http://www.openwall.com/lists/oss-security/2016/09/26/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93183Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037812
• https://access.redhat.com/errata/RHSA-2017:1931
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/
• https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201701-02Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0725.html
• http://www.openwall.com/lists/oss-security/2016/09/26/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93183Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037812
• https://access.redhat.com/errata/RHSA-2017:1931
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/
• https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201701-02Third Party Advisory

Published

Jan 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7537MagickCore/memory.c in ImageMagick allows remote attackers t…6.5
• CVE-2016-7538coders/psd.c in ImageMagick allows remote attackers to cause…6.5
• CVE-2016-7539Memory leak in AcquireVirtualMemory in ImageMagick before 7 …
• CVE-2016-7540coders/rgf.c in ImageMagick before 6.9.4-10 allows remote at…
• CVE-2016-7541Long lived sessions in Fortinet FortiGate devices with Forti…
• CVE-2016-7542A read-only administrator on Fortinet devices with FortiOS 5…
• CVE-2016-7544Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _mal…
• CVE-2016-7545SELinux policycoreutils allows local users to execute arbitr…
• CVE-2016-7547A command execution flaw on the Trend Micro Threat Discovery…
• CVE-2016-7549Google Chrome before 53.0.2785.113 does not ensure that the …
• CVE-2016-7550asterisk 13.10.0 is affected by: denial of service issues in…
• CVE-2016-7551chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13…