CVE-2017-5932

概要

参考情報

• git.savannah.gnu.org/cgit/bash.git/commit · Patch
• openwall.com/lists/oss-security/2017/02/08/3 · Mailing List
• securityfocus.com/bid/96136 · Third Party Advisory
• lists.gnu.org/archive/html/bug-bash/2017-01/msg00034.html · Mailing List

bash のその他の脆弱性

• CVE-2022-3715高 7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory pro…
• CVE-2019-18276高 7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID …
• CVE-2012-6711高 7.8A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE env…
• CVE-2019-9924高 7.8rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with t…
• CVE-2016-0634高 7.5The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters …