rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bashUpgrade bash-docUpgrade bash-debuginfo | Oct 28, 2020 | Mar 22, 2019 |
| Amazon_linux | — | Upgrade bash | Jul 2, 2020 | Mar 22, 2019 |
| Centos_linux | — | Upgrade bashUpgrade bash-docUpgrade bash-debuginfo | Apr 1, 2020 | Mar 22, 2019 |
| Debian | — | Upgrade bash | Mar 26, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Oracle_linux | — | Upgrade bashUpgrade bash-doc | Oct 5, 2022 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade bash-docNo solution existsUpgrade bashUpgrade bash-debuginfo | Apr 1, 2020 | Mar 22, 2019 |
| Suse | — | Upgrade bash-docUpgrade libreadline6-32bitUpgrade bashUpgrade readline-docUpgrade libreadline6Upgrade readline-develUpgrade bash-develUpgrade bash-lang | Apr 3, 2019 | Mar 22, 2019 |
| Ubuntu | — | Upgrade bash (Ubuntu Pro)Upgrade bash | Jul 16, 2019 | Mar 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub