CVE-2019-9924

ALTO 7.8CVE-2019-9924 · Published 22/03/2019 · updated 17/06/2026

In breve

CVE-2019-9924 è una vulnerabilità ALTO (CVSS 7.8) che riguarda bash (gnu).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.40%, superiore al 34.5% delle vulnerabilità.
Correzione: aggiornare a 4.4 o successiva.

Package	Affected versions	Patched versions
bash gnu	`= 4.4< 4.4`	`4.4`

Description

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

References

git.savannah.gnu.org/cgit/bash.git/tree/CHANGES · Vendor Advisory
lists.opensuse.org/opensuse-security-announce/2019-04/msg00049.html · Mailing List
bugs.launchpad.net/ubuntu/+source/bash/+bug/1803441 · Issue Tracking
lists.debian.org/debian-lts-announce/2019/03/msg00028.html · Mailing List
security.netapp.com/advisory/ntap-20190411-0001 · Third Party Advisory
usn.ubuntu.com/4058-1 · Third Party Advisory
usn.ubuntu.com/4058-2 · Third Party Advisory

Altre vulnerabilità di bash

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bash

gnu

= 4.4< 4.4

4.4

Altre vulnerabilità di bash

Vedi tutto →