Skip to content
OpenAdvisories
Medium ALAS2023-2023-091 1 CVE

Moderate: bash security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3715: A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2023 bash 0:5.2.15-1.amzn2023.0.2
Amazon Linux · 2023 bash-debuginfo 0:5.2.15-1.amzn2023.0.2
Amazon Linux · 2023 bash-debugsource 0:5.2.15-1.amzn2023.0.2
Amazon Linux · 2023 bash-devel 0:5.2.15-1.amzn2023.0.2
Amazon Linux · 2023 bash-doc 0:5.2.15-1.amzn2023.0.2

Vulnerabilities 1

  • High 7.8
    CVE-2022-3715

    A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue m…

    bash bash Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3715.html