{"id":"CVE-2012-6711","aliases":["BELL-CVE-2012-6711","DEBIAN-CVE-2012-6711","EUVD-2012-6552","GHSA-rwf6-27gf-7q62","SUSE-SU-2019:2976-1","UBUNTU-CVE-2012-6711"],"status":"published","title":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by...","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00531,"percentile":0.45155,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2019-06-18T17:34:08Z","modified":"2026-10-23T18:02:55Z","fixes":[{"ecosystem":"Debian:12","package":"bash","fixed_in":["4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bash","fixed_in":["4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bash","fixed_in":["4.3-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"bash","fixed_in":["4.2-83.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"bash","fixed_in":["4.2-83.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-83.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-83.6.1"}]}]}],"products":[{"vendor":"gnu","product":"bash"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721071","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel\u0026id=863d31ae775d56b785dc5b0105b6d251515d81d5","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"http://www.securityfocus.com/bid/108824","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K05122252","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K05122252?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4180-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6711"},{"url":"https://usn.ubuntu.com/4180-1"},{"url":"https://github.com/advisories/GHSA-rwf6-27gf-7q62"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2012-6711","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-6711","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192976-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1138676","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6711","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2012-6711","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4180-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6711","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-6711","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"published","published":"2019-06-18T17:34:08Z","modified":"2024-08-06T21:36:02.224Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:51.269982Z"}],"euvd":[{"id":"EUVD-2012-6552","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"published","published":"2019-06-18T17:34:08Z","modified":"2024-08-06T21:36:02Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N","level":"high"}],"updated_at":"2026-11-03T01:56:01.964017Z"}],"ghsa":[{"id":"GHSA-rwf6-27gf-7q62","title":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by...","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"published","published":"2022-04-23T00:40:06Z","modified":"2024-04-03T23:06:37Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:55:47.283285Z"}],"nvd":[{"id":"CVE-2012-6711","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"published","published":"2019-06-18T18:15:09.247Z","modified":"2026-06-16T23:48:39.277Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:18.043773Z"}],"osv":[{"id":"BELL-CVE-2012-6711","title":"CVE-2012-6711 does not affect BellSoft software","status":"withdrawn","published":"2019-06-18T18:15:00Z","modified":"2026-01-26T09:49:26.443975Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2012-6711","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"published","published":"2019-06-18T18:15:09Z","modified":"2026-04-10T03:43:16.360287Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-6711","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"published","published":"2019-06-18T18:15:09.247Z","modified":"2026-10-23T18:02:55.019123786Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"UBUNTU-CVE-2012-6711","description":"A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().","status":"withdrawn","published":"2019-06-18T18:15:00Z","modified":"2026-02-04T03:44:26.092593Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:06.854805Z"},{"id":"SUSE-SU-2019:2976-1","title":"Security update for bash","description":"This update for bash fixes the following issues:\n\n- CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters\t  \n  (bsc#1138676).\n","status":"published","published":"2019-11-14T17:46:44Z","modified":"2026-02-04T03:54:08.377819Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}