CVE-2012-6711 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-6711 Interim 1 31 2023-06-26T00:49:31Z current 2021-05-30T13:08:01Z 2023-06-26T00:49:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-6711 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-November/006142.html E-Mail link for SUSE-SU-2019:2976-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SLES for SAP Applications 11 SP3 SUSE CaaS Platform 3.0 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 bash bash-4.2-83.6.1 bash-devel bash-doc bash-doc-4.2-83.6.1 bash-lang libreadline6 libreadline6-32bit libreadline6-32bit-6.2-83.6.1 libreadline6-6.2-83.6.1 libreadline7 libreadline7-32bit readline-devel readline-doc readline-doc-6.2-83.6.1 bash-4.2-83.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bash-doc-4.2-83.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libreadline6-6.2-83.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libreadline6-32bit-6.2-83.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS readline-doc-6.2-83.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bash-4.2-83.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bash-doc-4.2-83.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libreadline6-6.2-83.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libreadline6-32bit-6.2-83.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 readline-doc-6.2-83.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bash as a component of Magnum Orchestration 7 bash as a component of SLES for SAP Applications 11 SP3 bash as a component of SUSE CaaS Platform 3.0 libreadline6 as a component of SUSE CaaS Platform 3.0 bash as a component of SUSE Container as a Service Platform 2.0 bash as a component of SUSE Linux Enterprise Desktop 12 SP3 bash-doc as a component of SUSE Linux Enterprise Desktop 12 SP3 bash-lang as a component of SUSE Linux Enterprise Desktop 12 SP3 libreadline6 as a component of SUSE Linux Enterprise Desktop 12 SP3 libreadline6-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 readline-doc as a component of SUSE Linux Enterprise Desktop 12 SP3 bash as a component of SUSE Linux Enterprise Desktop 12 SP4 bash-doc as a component of SUSE Linux Enterprise Desktop 12 SP4 bash-lang as a component of SUSE Linux Enterprise Desktop 12 SP4 libreadline6 as a component of SUSE Linux Enterprise Desktop 12 SP4 libreadline6-32bit as a component of SUSE Linux Enterprise Desktop 12 SP4 readline-doc as a component of SUSE Linux Enterprise Desktop 12 SP4 bash as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 bash as a component of SUSE Linux Enterprise Module for Basesystem 15 bash-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 bash-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 bash-lang as a component of SUSE Linux Enterprise Module for Basesystem 15 libreadline7 as a component of SUSE Linux Enterprise Module for Basesystem 15 libreadline7-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 readline-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 readline-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 bash as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 bash-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 bash-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 bash-lang as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libreadline7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libreadline7-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 readline-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 readline-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 bash as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata bash as a component of SUSE Linux Enterprise Server 11 SP3 LTSS bash as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata bash as a component of SUSE Linux Enterprise Server 12 SP2-LTSS bash-doc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libreadline6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS readline-doc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS bash as a component of SUSE Linux Enterprise Server 12 SP3 bash-doc as a component of SUSE Linux Enterprise Server 12 SP3 libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3 libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3 readline-doc as a component of SUSE Linux Enterprise Server 12 SP3 bash as a component of SUSE Linux Enterprise Server 12 SP4 bash-doc as a component of SUSE Linux Enterprise Server 12 SP4 libreadline6 as a component of SUSE Linux Enterprise Server 12 SP4 libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP4 readline-doc as a component of SUSE Linux Enterprise Server 12 SP4 bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bash-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 readline-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 bash as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 bash-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 readline-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 bash as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 bash-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 bash as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 bash-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 bash as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). CVE-2012-6711 SUSE Linux Enterprise Server 12 SP1-LTSS:bash-4.2-83.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bash-doc-4.2-83.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libreadline6-6.2-83.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libreadline6-32bit-6.2-83.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:readline-doc-6.2-83.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bash-4.2-83.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bash-doc-4.2-83.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libreadline6-6.2-83.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libreadline6-32bit-6.2-83.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:readline-doc-6.2-83.6.1 Magnum Orchestration 7:bash SLES for SAP Applications 11 SP3:bash SUSE CaaS Platform 3.0:bash SUSE CaaS Platform 3.0:libreadline6 SUSE Container as a Service Platform 2.0:bash SUSE Linux Enterprise Desktop 12 SP3:bash SUSE Linux Enterprise Desktop 12 SP3:bash-doc SUSE Linux Enterprise Desktop 12 SP3:bash-lang SUSE Linux Enterprise Desktop 12 SP3:libreadline6 SUSE Linux Enterprise Desktop 12 SP3:libreadline6-32bit SUSE Linux Enterprise Desktop 12 SP3:readline-doc SUSE Linux Enterprise Desktop 12 SP4:bash SUSE Linux Enterprise Desktop 12 SP4:bash-doc SUSE Linux Enterprise Desktop 12 SP4:bash-lang SUSE Linux Enterprise Desktop 12 SP4:libreadline6 SUSE Linux Enterprise Desktop 12 SP4:libreadline6-32bit SUSE Linux Enterprise Desktop 12 SP4:readline-doc SUSE Linux Enterprise High Performance Computing 12 SP4:bash SUSE Linux Enterprise Module for Basesystem 15 SP1:bash SUSE Linux Enterprise Module for Basesystem 15 SP1:bash-devel SUSE Linux Enterprise Module for Basesystem 15 SP1:bash-doc SUSE Linux Enterprise Module for Basesystem 15 SP1:bash-lang SUSE Linux Enterprise Module for Basesystem 15 SP1:libreadline7 SUSE Linux Enterprise Module for Basesystem 15 SP1:libreadline7-32bit SUSE Linux Enterprise Module for Basesystem 15 SP1:readline-devel SUSE Linux Enterprise Module for Basesystem 15 SP1:readline-doc SUSE Linux Enterprise Module for Basesystem 15:bash SUSE Linux Enterprise Module for Basesystem 15:bash-devel SUSE Linux Enterprise Module for Basesystem 15:bash-doc SUSE Linux Enterprise Module for Basesystem 15:bash-lang SUSE Linux Enterprise Module for Basesystem 15:libreadline7 SUSE Linux Enterprise Module for Basesystem 15:libreadline7-32bit SUSE Linux Enterprise Module for Basesystem 15:readline-devel SUSE Linux Enterprise Module for Basesystem 15:readline-doc SUSE Linux Enterprise Server 11 SP1 for Teradata:bash SUSE Linux Enterprise Server 11 SP3 LTSS:bash SUSE Linux Enterprise Server 11 SP3 for Teradata:bash SUSE Linux Enterprise Server 12 SP2-LTSS:bash SUSE Linux Enterprise Server 12 SP2-LTSS:bash-doc SUSE Linux Enterprise Server 12 SP2-LTSS:libreadline6 SUSE Linux Enterprise Server 12 SP2-LTSS:libreadline6-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:readline-doc SUSE Linux Enterprise Server 12 SP3:bash SUSE Linux Enterprise Server 12 SP3:bash-doc SUSE Linux Enterprise Server 12 SP3:libreadline6 SUSE Linux Enterprise Server 12 SP3:libreadline6-32bit SUSE Linux Enterprise Server 12 SP3:readline-doc SUSE Linux Enterprise Server 12 SP4:bash SUSE Linux Enterprise Server 12 SP4:bash-doc SUSE Linux Enterprise Server 12 SP4:libreadline6 SUSE Linux Enterprise Server 12 SP4:libreadline6-32bit SUSE Linux Enterprise Server 12 SP4:readline-doc SUSE Linux Enterprise Server for SAP Applications 12 SP2:bash SUSE Linux Enterprise Server for SAP Applications 12 SP2:bash-doc SUSE Linux Enterprise Server for SAP Applications 12 SP2:libreadline6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libreadline6-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:readline-doc SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash-doc SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP3:readline-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:readline-doc SUSE Linux Enterprise Software Development Kit 12 SP3:bash SUSE Linux Enterprise Software Development Kit 12 SP3:bash-devel SUSE Linux Enterprise Software Development Kit 12 SP3:readline-devel SUSE Linux Enterprise Software Development Kit 12 SP4:bash SUSE Linux Enterprise Software Development Kit 12 SP4:bash-devel SUSE Linux Enterprise Software Development Kit 12 SP4:readline-devel SUSE Linux Enterprise Workstation Extension 12 SP3:bash SUSE Linux Enterprise Workstation Extension 12 SP3:bash-lang SUSE Linux Enterprise Workstation Extension 12 SP4:bash SUSE Linux Enterprise Workstation Extension 12 SP4:bash-lang moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H