rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bashUpgrade bash-debuginfoUpgrade bash-doc | Oct 28, 2020 | Mar 22, 2019 |
| Amazon_linux | — | Upgrade bash | Jul 2, 2020 | Mar 22, 2019 |
| Centos_linux | — | Upgrade bash-debuginfoUpgrade bash-docUpgrade bash | Apr 1, 2020 | Mar 22, 2019 |
| Debian | — | Upgrade bash | Mar 26, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Oracle_linux | — | Upgrade bash-docUpgrade bash | Oct 5, 2022 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade bashUpgrade bash-debuginfoNo solution existsUpgrade bash-doc | Apr 1, 2020 | Mar 22, 2019 |
| Suse | — | Upgrade bash-langUpgrade bash-develUpgrade readline-develUpgrade bash-docUpgrade libreadline6-32bitUpgrade bashUpgrade libreadline6Upgrade readline-doc | Apr 3, 2019 | Mar 22, 2019 |
| Ubuntu | — | Upgrade bashUpgrade bash (Ubuntu Pro) | Jul 16, 2019 | Mar 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub