CVE-2016-7543: Fedoraproject Fedora

High severity, CVSS 8.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.

Affected products

• Fedoraproject Fedora: version 23 only; version 24 only; version 25 only
• GNU Bash: up to and including 4.3

Published 2017-01-19. Last modified 2026-06-17.