rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bash-docUpgrade bash-debuginfoUpgrade bash | Oct 28, 2020 | Mar 22, 2019 |
| Amazon_linux | — | Upgrade bash | Jul 2, 2020 | Mar 22, 2019 |
| Centos_linux | — | Upgrade bash-debuginfoUpgrade bash-docUpgrade bash | Apr 1, 2020 | Mar 22, 2019 |
| Debian | — | Upgrade bash | Mar 26, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bash | May 30, 2019 | Mar 22, 2019 |
| Oracle_linux | — | Upgrade bash-docUpgrade bash | Oct 5, 2022 | Mar 7, 2019 |
| Redhat_linux | — | Upgrade bash-docNo solution existsUpgrade bash-debuginfoUpgrade bash | Apr 1, 2020 | Mar 22, 2019 |
| Suse | — | Upgrade bash-docUpgrade libreadline6-32bitUpgrade bashUpgrade libreadline6Upgrade readline-docUpgrade bash-langUpgrade bash-develUpgrade readline-devel | Apr 3, 2019 | Mar 22, 2019 |
| Ubuntu | — | Upgrade bash (Ubuntu Pro)Upgrade bash | Jul 16, 2019 | Mar 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub