CVE 2016-9401

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

Related bugs and status

CVE-2016-9401 (Candidate) is related to these bugs:

Bug #1507025: Shell Command Injection with the hostname

Summary				In	Importance	Status
	1507025	Shell Command Injection with the hostname		bash (Ubuntu)	Undecided	Fix Released

Bug #1689304: Unfixed Code Execution Vulnerability CVE-2016-7543

Summary				In	Importance	Status
	1689304	Unfixed Code Execution Vulnerability CVE-2016-7543		bash (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.