Поиск уязвимостей
Количество 43
Количество 43
ALT-PU-2018-2880
ALT-PU-2018-2880: package `bash4` update to version 4.4.23-alt1
CVE-2012-6711
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
CVE-2012-6711
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
CVE-2012-6711
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
CVE-2012-6711
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide c ...
SUSE-SU-2019:2976-1
Security update for bash
GHSA-rwf6-27gf-7q62
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
ELSA-2017-1931
ELSA-2017-1931: bash security and bug fix update (MODERATE)
ELSA-2017-0725
ELSA-2017-0725: bash security and bug fix update (MODERATE)
CVE-2016-7543
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
CVE-2016-7543
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
CVE-2016-7543
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
CVE-2016-7543
Bash before 4.4 allows local users to execute arbitrary commands with ...
GHSA-6xh6-xvh9-w4h5
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
ALT-PU-2017-2502
ALT-PU-2017-2502: package `bash` update to version 3.2.57-alt3
openSUSE-SU-2018:1419-1
Security update for bash
SUSE-SU-2018:1398-2
Security update for bash
SUSE-SU-2018:1398-1
Security update for bash
SUSE-SU-2017:0302-1
Security update for bash
CVE-2016-9401
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-2880 ALT-PU-2018-2880: package `bash4` update to version 4.4.23-alt1 | CVSS3: 8.4 | почти 8 лет назад | |
 | CVE-2012-6711 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). | CVSS3: 7.8 | 1% Низкий | больше 7 лет назад |
 | CVE-2012-6711 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). | CVSS3: 7 | 1% Низкий | больше 7 лет назад |
 | CVE-2012-6711 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). | CVSS3: 7.8 | 1% Низкий | больше 7 лет назад |
| CVE-2012-6711 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide c ... | CVSS3: 7.8 | 1% Низкий | больше 7 лет назад |
 | SUSE-SU-2019:2976-1 Security update for bash | 1% Низкий | почти 7 лет назад | |
| GHSA-rwf6-27gf-7q62 A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад |
| ELSA-2017-1931 ELSA-2017-1931: bash security and bug fix update (MODERATE) | больше 9 лет назад | ||
| ELSA-2017-0725 ELSA-2017-0725: bash security and bug fix update (MODERATE) | больше 9 лет назад | ||
| CVE-2016-7543 Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. | CVSS3: 8.4 | 1% Низкий | почти 10 лет назад |
| CVE-2016-7543 Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. | CVSS3: 7 | 1% Низкий | около 10 лет назад |
| CVE-2016-7543 Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. | CVSS3: 8.4 | 1% Низкий | почти 10 лет назад |
| CVE-2016-7543 Bash before 4.4 allows local users to execute arbitrary commands with ... | CVSS3: 8.4 | 1% Низкий | почти 10 лет назад |
| GHSA-6xh6-xvh9-w4h5 Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. | CVSS3: 8.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2017-2502 ALT-PU-2017-2502: package `bash` update to version 3.2.57-alt3 | CVSS3: 8.4 | 1% Низкий | около 9 лет назад |
| openSUSE-SU-2018:1419-1 Security update for bash | больше 8 лет назад | ||
| SUSE-SU-2018:1398-2 Security update for bash | около 8 лет назад | ||
| SUSE-SU-2018:1398-1 Security update for bash | больше 8 лет назад | ||
| SUSE-SU-2017:0302-1 Security update for bash | почти 10 лет назад | ||
| CVE-2016-9401 popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. | CVSS3: 5.5 | 0% Низкий | почти 10 лет назад |
Уязвимостей на страницу