Skip to content
OpenAdvisories

Package · Ubuntu

bash

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • High 7.8
    CVE-2022-3715

    A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue m…

    bash bash Debian Ubuntu
  • High 7.8
    CVE-2019-18276 Public exploit

    An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run wi…

    bash bash Debian Ubuntu
  • Unscored —
    CVE-2019-9924

    rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execu…

    bash bash Debian Ubuntu
  • Unscored —
    CVE-2016-0634

    The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via …

    bash bash bash Debian Ubuntu Alpine
  • Medium 6.2
    CVE-2016-9401

    popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

    bash bash bash Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7543

    Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 env…

    bash bash Debian Ubuntu
  • High 8.8
    CVE-2014-6278 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

    bash bash Debian Ubuntu
    KEV Oct 2, 2025
  • Unscored —
    CVE-2014-7186 Public exploit EPSS 64%

    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

    bash bash Debian Ubuntu
  • Unscored —
    CVE-2014-7187 Public exploit EPSS 60%

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …

    bash bash Debian Ubuntu
  • Unscored —
    CVE-2014-6277 Public exploit EPSS 64%

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

    bash bash Debian Ubuntu
  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2014-6271 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022