CVE-2019-9924

概要

参考情報

• git.savannah.gnu.org/cgit/bash.git/tree/CHANGES · Vendor Advisory
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00049.html · Mailing List
• bugs.launchpad.net/ubuntu/+source/bash/+bug/1803441 · Issue Tracking
• lists.debian.org/debian-lts-announce/2019/03/msg00028.html · Mailing List
• security.netapp.com/advisory/ntap-20190411-0001 · Third Party Advisory
• usn.ubuntu.com/4058-1 · Third Party Advisory
• usn.ubuntu.com/4058-2 · Third Party Advisory

bash のその他の脆弱性

• CVE-2022-3715高 7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory pro…
• CVE-2019-18276高 7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID …
• CVE-2012-6711高 7.8A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE env…
• CVE-2016-0634高 7.5The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters …
• CVE-2017-5932高 7.8The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) ch…