CVE-2012-3410: Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to...

Security readout for executives and security teams

CVE-2012-3410 is an old GNU Bash flaw where a very long /dev/fd filename could mishandle memory and potentially let a local user escape intended restricted-shell limits. This matters mainly on systems that used restricted shells as a control boundary. It is not listed in CISA KEV, and the provided sources do not show active exploitation. Exposure is most likely on legacy Unix/Linux systems running GNU Bash before 4.2 patch 33, especially where restricted shells were used to constrain local users. Modern supported distributions are likely already patched, but embedded, appliance, or long-lived servers may still need verification. Treat as a targeted legacy hygiene issue. Prioritize systems where local users, contractors, or jailed accounts are controlled mainly by restricted shell. For fully patched supported Linux estates, urgency is lower, but validation is still prudent because Bash is widely deployed. Mitigation focus: Update GNU Bash to 4.2 patch 33 or later, preferably through vendor-supported packages.; Review applicable Linux distribution advisories for backported fixes and package names.; Do not rely on restricted shell alone as a security boundary..

Prepared

Jun 28, 2026, 02:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.