Buffer overflow in Gnu Bash

CVE-2012-3410

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd pre…

Vulnerability class: Buffer Overflow

EPSS: 0.004 (33.5th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Bash — versions 4.2
  • N/a — versions n/a

Weakness classification (CWE)

References