The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-bash | Aug 22, 2024 | Aug 28, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade-bash | Sep 1, 2017 | Nov 3, 2016 |
| Centos_linux | — | centos-upgrade-bashcentos-upgrade-bash-debuginfocentos-upgrade-bash-doc | Aug 28, 2019 | Aug 28, 2017 |
| Debian | debian-upgrade-bash | Jul 30, 2024 | Aug 28, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-shells-bash | Oct 30, 2017 | Aug 28, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-bash | Nov 30, 2017 | Aug 28, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-bash | Nov 30, 2017 | Aug 28, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-shell-bash-4-4-11-0-175-3-17-0-4-0 | May 29, 2017 | May 29, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-bashredhat-upgrade-bash-debuginforedhat-upgrade-bash-doc | Mar 21, 2017 | Nov 3, 2016 | |
| Suse | — | suse-upgrade-bashsuse-upgrade-bash-develsuse-upgrade-bash-docsuse-upgrade-bash-langsuse-upgrade-bash-x86suse-upgrade-libreadline5suse-upgrade-libreadline5-32bitsuse-upgrade-libreadline5-x86suse-upgrade-libreadline6suse-upgrade-libreadline6-32bitsuse-upgrade-readline-develsuse-upgrade-readline-devel-32bitsuse-upgrade-readline-docsuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-image | Nov 3, 2016 | Nov 3, 2016 |
| Ubuntu | ubuntu-upgrade-bash | May 18, 2017 | Nov 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub