Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
CVSS Details
- CVSS 3.0 Base Score: 8.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bash | Aug 30, 2017 | Jan 19, 2017 |
| Amazon_linux | — | Upgrade bash | Sep 1, 2017 | Jan 19, 2017 |
| Centos_linux | — | Upgrade bashUpgrade bash-docUpgrade bash-debuginfo | Aug 28, 2019 | Jan 19, 2017 |
| Debian | — | Upgrade bash | Mar 31, 2017 | Oct 26, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 27, 2017 |
| Gentoo Linux | — | Upgrade app-shells/bash. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bash | Nov 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bash | Nov 30, 2017 | Jan 19, 2017 |
| Oracle Solaris | — | Upgrade shell/bash to version 4.4.11-0.175.3.17.0.4.0 on Solaris 11.3 | May 29, 2017 | Jan 19, 2017 |
| Oracle_linux | — | Upgrade bash-docUpgrade bash | Mar 28, 2017 | Sep 16, 2016 |
| Redhat_linux | — | No solution existsUpgrade bash-debuginfoUpgrade bashUpgrade bash-doc | Mar 21, 2017 | Jan 19, 2017 |
| Suse | — | Upgrade bash-x86Upgrade bash-langUpgrade libreadline6Upgrade bashUpgrade libreadline5Upgrade libreadline5-x86Upgrade libreadline5-32bitUpgrade bash-docUpgrade readline-docUpgrade libreadline6-32bitUpgrade sles12sp1-docker-imageUpgrade readline-develUpgrade sles12-docker-imageUpgrade bash-develUpgrade readline-devel-32bit | Jan 19, 2017 | Jan 19, 2017 |
| Ubuntu | — | Upgrade bash | May 18, 2017 | Jan 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub