ALPINE-CVE-2016-9401 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2016-9401 PUBLISHED CVSS 5.5 MEDIUM

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

Risk Scores

CVSS v3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.5	bash	0, 4.3.46-r4, 4.3.46-r3
Alpine:v3.4	bash	4.3.011-r2, 4.0.035-r0, 4.1.002-r0
Alpine:v3.3	bash	4.2.024-r0, 4.2.008-r0, 4.2.028-r0
Alpine:v3.2	bash	4.2.042-r0, 4.2.039-r0, 4.2.037-r0

Timeline

Jan 23, 2017 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2016-9401 advisory

Open in Interactive Console →