CVE-2012-3410

Publication date 27 August 2012

Last updated 24 July 2024

Ubuntu priority

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
bash	14.04 LTS trusty	Not affected
	13.10 saucy	Not affected
	13.04 raring	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Ignored
	11.10 oneiric	Ignored end of life
	11.04 natty	Ignored end of life
	10.04 LTS lucid	Ignored
	8.04 LTS hardy	Ignored end of life

Notes

jdstrand

reproducer in oss thread verified that compiler hardening blocks this on all releases (-D_FORTIFY_SOURCE=2 on 10.04 LTS+ and -fstack-protector on 8.04 LTS)

mdeslaur

since this gets blocked, it is not a security issue. Ignoring.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
bash	Other: ftp://ftp.gnu.org/pub/gnu/bash/bash-4.2-patches/bash42-033