Skip to content
OpenAdvisories
High USN-5380-1 1 CVE

bash vulnerability

Published Apr 20, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Bash did not properly drop privileges
when the binary had the setuid bit enabled. An attacker could
possibly use this issue to escalate privileges.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS bash 4.4.18-2ubuntu1.3
Ubuntu · 20.04 LTS 20.04:LTS bash 5.0-6ubuntu1.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS bash 4.3-7ubuntu1.8+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bash 4.3-14ubuntu1.4+esm1

Vulnerabilities 1

  • High 7.8
    CVE-2019-18276 Public exploit

    An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run wi…

    bash bash Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-18276