Lucene search

GoogleOSV:CVE-2016-6902

HistoryApr 24, 2017 - 7:59 p.m.

CVE-2016-6902

2017-04-2419:59:00

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.

CPENameOperatorVersion
lshelleq0.9.16
lshelleq0.9.15
lshelleq0.9.18
lshelleq0.9.17
lshelleq0.9.15.1

Name	Operator	Version
lshell	eq	0.9.16
lshell	eq	0.9.15
lshell	eq	0.9.18
lshell	eq	0.9.17
lshell	eq	0.9.15.1

References

www.openwall.com/lists/oss-security/2016/08/22/17

www.securityfocus.com/bid/92591

bugs.debian.org/cgi-bin/bugreport.cgi?bug=834949

bugzilla.redhat.com/show_bug.cgi?id=1369345

github.com/ghantoos/lshell/commit/a686f71732a3d0f16df52ef46ab8a49ee0083c68

github.com/ghantoos/lshell/issues/147