Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5932

Опубликовано: 27 мар. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 7.8

Описание

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.

РелизСтатусПримечание
devel

released

4.4-5ubuntu1
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/xenial

not-affected

code not present
precise

not-affected

code not present
precise/esm

not-affected

code not present
trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

released

4.4-3
vivid/stable-phone-overlay

not-affected

code not present
vivid/ubuntu-core

not-affected

code not present

Показывать по

EPSS

Процентиль: 44%
0.00213
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
около 9 лет назад

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.

CVSS3: 7.8
nvd
почти 9 лет назад

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.

CVSS3: 7.8
debian
почти 9 лет назад

The path autocompletion feature in Bash 4.4 allows local users to gain ...

CVSS3: 7.8
github
больше 3 лет назад

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.

EPSS

Процентиль: 44%
0.00213
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3