GNU Bash Off-by-one aka 'word_lineno' Buffer Overflow Vulnerability (LSC)

  1. Network Vulnerabilities
  2. General
  3. GNU Bash Off-by-one aka 'word_lineno' Buffer Overflow Vulnerability (LSC)
Summary
This host is installed with GNU Bash Shell and is prone to command execution vulnerability.
Impact
Successful exploitation will allow attackers to execute arbitrary commands. Impact Level: System/Application
Solution
Apply the appropriate patch. For updates refer to refer to http://www.gnu.org/software/bash/
Insight
GNU bash contains an off-by-one overflow condition that is triggered when handling deeply nested flow control constructs.
Affected
GNU Bash through 4.3 bash43-026
Detection
Login to the target machine with ssh credentials and check its possible to execute the commands via GNU bash shell.
References
Updated on 2017-03-28
Severity
High Severity
Classification
Related Vulnerabilities