Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
CVSS Details
- CVSS 3.0 Base Score: 8.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bash | Aug 30, 2017 | Jan 19, 2017 |
| Amazon_linux | — | Upgrade bash | Sep 1, 2017 | Jan 19, 2017 |
| Centos_linux | — | Upgrade bashUpgrade bash-debuginfoUpgrade bash-doc | Aug 28, 2019 | Jan 19, 2017 |
| Debian | — | Upgrade bash | Mar 31, 2017 | Oct 26, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 27, 2017 |
| Gentoo Linux | — | Upgrade app-shells/bash. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bash | Nov 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bash | Nov 30, 2017 | Jan 19, 2017 |
| Oracle Solaris | — | Upgrade shell/bash to version 4.4.11-0.175.3.17.0.4.0 on Solaris 11.3 | May 29, 2017 | Jan 19, 2017 |
| Oracle_linux | — | Upgrade bashUpgrade bash-doc | Mar 28, 2017 | Sep 16, 2016 |
| Redhat_linux | — | No solution existsUpgrade bash-debuginfoUpgrade bash-docUpgrade bash | Mar 21, 2017 | Jan 19, 2017 |
| Suse | — | Upgrade libreadline6-32bitUpgrade sles12-docker-imageUpgrade readline-develUpgrade bash-develUpgrade readline-devel-32bitUpgrade sles12sp1-docker-imageUpgrade libreadline5-32bitUpgrade readline-docUpgrade bash-langUpgrade bash-x86Upgrade libreadline6Upgrade libreadline5Upgrade libreadline5-x86Upgrade bashUpgrade bash-doc | Jan 19, 2017 | Jan 19, 2017 |
| Ubuntu | — | Upgrade bash | May 18, 2017 | Jan 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub