Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:bash:4.4:patch2:*:*:*:*:*:*

part: a version: 4.4 update: patch2

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductBash (079666e7-d9bd-5cfd-adba-02c753f8876b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/bash purl2cpe 2026-06-01 10:11:54.259659
pkg:deb/ubuntu/bash purl2cpe 2026-06-01 10:11:54.259660
pkg:github/bminor/bash purl2cpe 2026-06-01 10:11:54.259661
pkg:github/gitgnu/gnu_bash purl2cpe 2026-06-01 10:11:54.259663
pkg:gitlab/redhat/bash purl2cpe 2026-06-01 10:11:54.259664
pkg:gnu/bash purl2cpe 2026-06-01 10:11:54.259665
pkg:rpm/centos/bash purl2cpe 2026-06-01 10:11:54.259667
pkg:rpm/fedora/bash purl2cpe 2026-06-01 10:11:54.259668
pkg:rpm/opensuse/bash purl2cpe 2026-06-01 10:11:54.259669

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9401 vulnerable 2026-06-08 05:08:23.566743 Details available
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
Published: 2017-01-23T21:00:00.000Z
Updated: 2025-08-06T21:12:45.629Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.