← All advisories

Critical severity9.9OSV Advisory· Published Apr 24, 2017· Updated Jun 17, 2026

CVE-2016-6903

CVE-2016-6903

Description

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Lshell/lshellOSV3 versions
0.9.15, 0.9.15.1, 0.9.16, …+ 2 more
- (no CPE)range: 0.9.15, 0.9.15.1, 0.9.16, …
- cpe:2.3:a:lshell_project:lshell:0.9.16:*:*:*:*:*:*:*
- (no CPE)range: =0.9.16

Patches

Vulnerability mechanics

References

7

www.openwall.com/lists/oss-security/2016/08/22/17nvdMailing ListPatchThird Party Advisory
bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatch
github.com/ghantoos/lshell/commit/e72dfcd1f258193f9aaea3591ecbdaed207661a0nvdIssue TrackingPatchThird Party Advisory
github.com/ghantoos/lshell/issues/149nvdIssue TrackingPatchThird Party Advisory
github.com/ghantoos/lshell/pull/153/commits/a686f71732a3d0f16df52ef46ab8a49ee0083c68nvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/92591nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.