CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2016-0634
High (7.5) in gnu bash. EPSS 6.0% chance of exploitation in the next 30 days.
The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.
Severity
- EPSS
- 6.0% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gnu:bash