CVE-2012-3410

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long…

published August 27, 2012

CVSS
—
EPSS
0%
Percentile
34.1
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.1th percentile
Published
2012-08-27T23:00Z
EPSS history
Timeline
  • 27 AUG 23:00Z
    Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long…
    cvelistv5