bash

16 results · Feed

• High 7.8
  CVE-2022-3715

  A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue m…

  bash bash Debian Ubuntu
  Jan 5, 2023
• High 7.8
  CVE-2019-18276 Public exploit

  An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run wi…

  bash bash Debian Ubuntu
  Nov 28, 2019
• High 7.0
  CVE-2012-6711

  A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale se…

  bash Debian
  Jun 18, 2019
• Unscored —
  CVE-2019-9924

  rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execu…

  bash bash Debian Ubuntu
  Mar 22, 2019
• Unscored —
  CVE-2016-0634

  The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via …

  bash bash bash Debian Ubuntu Alpine
  Aug 28, 2017
• Unscored —
  CVE-2017-5932

  The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with …

  bash Debian
  Mar 27, 2017
• Medium 6.2
  CVE-2016-9401

  popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

  bash bash bash Debian Ubuntu Alpine
  Jan 23, 2017
• Unscored —
  CVE-2016-7543

  Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 env…

  bash bash Debian Ubuntu
  Jan 19, 2017
• High 8.8
  CVE-2014-6278 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

  bash bash Debian Ubuntu
  Sep 30, 2014

  KEV Oct 2, 2025
• Unscored —
  CVE-2014-7186 Public exploit EPSS 64%

  The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

  bash bash Debian Ubuntu
  Sep 28, 2014
• Unscored —
  CVE-2014-7187 Public exploit EPSS 60%

  Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …

  bash bash Debian Ubuntu
  Sep 28, 2014
• Unscored —
  CVE-2014-6277 Public exploit EPSS 64%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

  bash bash Debian Ubuntu
  Sep 27, 2014
• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-6271 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

  bash bash Debian Ubuntu
  Sep 24, 2014

  KEV Jan 28, 2022
• Unscored —
  CVE-2012-3410

  Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass inten…

  bash Debian
  Aug 27, 2012
• Unscored —
  CVE-2008-5374

  bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, r…

  bash Debian
  Dec 8, 2008