Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
CVSS Details
- CVSS 3.0 Base Score: 8.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bash | Aug 30, 2017 | Jan 19, 2017 |
| Amazon_linux | — | Upgrade bash | Sep 1, 2017 | Jan 19, 2017 |
| Centos_linux | — | Upgrade bashUpgrade bash-debuginfoUpgrade bash-doc | Aug 28, 2019 | Jan 19, 2017 |
| Debian | — | Upgrade bash | Mar 31, 2017 | Oct 26, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 27, 2017 |
| Gentoo Linux | — | Upgrade app-shells/bash. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bash | Nov 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bash | Nov 30, 2017 | Jan 19, 2017 |
| Oracle Solaris | — | Upgrade shell/bash to version 4.4.11-0.175.3.17.0.4.0 on Solaris 11.3 | May 29, 2017 | Jan 19, 2017 |
| Oracle_linux | — | Upgrade bash-docUpgrade bash | Mar 28, 2017 | Sep 16, 2016 |
| Redhat_linux | — | Upgrade bash-debuginfoUpgrade bashUpgrade bash-docNo solution exists | Mar 21, 2017 | Jan 19, 2017 |
| Suse | — | Upgrade bash-x86Upgrade bash-docUpgrade libreadline6Upgrade libreadline5Upgrade bashUpgrade libreadline5-x86Upgrade bash-langUpgrade libreadline5-32bitUpgrade readline-docUpgrade libreadline6-32bitUpgrade sles12-docker-imageUpgrade readline-devel-32bitUpgrade sles12sp1-docker-imageUpgrade readline-develUpgrade bash-devel | Jan 19, 2017 | Jan 19, 2017 |
| Ubuntu | — | Upgrade bash | May 18, 2017 | Jan 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub