CVE-2016-6902

critical
Published 2017-04-24 · Modified 2026-05-13
CVSS v3
9.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v2
9.0
VIR risk
9.9

Description

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.

Predictions

Exploit likelihood
98%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: security@debian.org — https://github.com/ghantoos/lshell/issues/147

vendor Authored 2026-05-27

Vendor advisory: security@debian.org — https://github.com/ghantoos/lshell/commit/a686f71732a3d0f16df52ef46ab8a49ee0083c68

vendor Authored 2026-05-27

Vendor advisory: security@debian.org — https://bugzilla.redhat.com/show_bug.cgi?id=1369345

vendor Authored 2026-05-27

Vendor advisory: security@debian.org — https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834949

vendor Authored 2026-05-27

Vendor advisory: security@debian.org — http://www.openwall.com/lists/oss-security/2016/08/22/17

Application impact

VendorProductVersionsFixed
lshell_projectlshell0.9.16

References

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.