CVE-2019-9924

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...

7.8 HighFix available

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.40%Down 1.3 points since Apr 14, 2021

What each source reports

NVD Score used 7.8

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: CVE-2019-9924
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-862
Updated: 2026-11-02

CVE List No score

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: CVE-2019-9924
Updated: 2026-11-02

EUVDEUVD-2019-19279 No score

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: EUVD-2019-19279
Updated: 2026-11-03

GitHub AdvisoriesGHSA-56xr-5j9v-w2wh 7.8

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: GHSA-56xr-5j9v-w2wh
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-862
Updated: 2026-11-02

OSV 7.8

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: CVE-2019-9924
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-9924 7.8

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: DEBIAN-CVE-2019-9924
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 13 moreShow less

OSVRHSA-2020:1113 7.8

Red Hat Security Advisory: bash security update

Record: RHSA-2020:1113
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3474 7.8

Red Hat Security Advisory: bash security update

Record: RHSA-2020:3474
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3592 7.8

Red Hat Security Advisory: bash security update

Record: RHSA-2020:3592
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3803 7.8

Red Hat Security Advisory: bash security update

Record: RHSA-2020:3803
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2019-9924 7.8

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Record: UBUNTU-CVE-2019-9924
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2026-1777367927 No score

bash: Fix of CVE-2019-9924

CVE-2019-9924: reject attempts to add pathnames containing slashes to the hash table in restricted shell

Record: CLSA-2026-1777367927
Updated: 2026-11-02

OSVCLSA-2026-1777446568 No score

bash: Fix of CVE-2019-9924

CVE-2019-9924: reject attempts to add pathnames containing slashes to the hash table in restricted shell

Record: CLSA-2026-1777446568
Updated: 2026-11-02

OSVMGASA-2019-0163 No score

Updated bash packages fix security vulnerability

Updated bash package fixes security vulnerability:

A vulnerability in which shell did not prevent user BASH_CMDS, allowing the user to execute any command with the permissions of the shell (CVE-2019-9924).

Record: MGASA-2019-0163
Updated: 2026-11-02

OSVSUSE-SU-2019:0838-1 No score

Security update for bash

This update for bash fixes the following issues:

Security issue fixed:

CVE-2019-9924: Fixed a vulnerability in which shell did not prevent user BASH_CMDS allowing the user to execute any command with the permissions of the shell (bsc#1130324).

Record: SUSE-SU-2019:0838-1
Updated: 2026-11-02

OSVSUSE-SU-2019:0838-2 No score

Security update for bash

This update for bash fixes the following issues:

Security issue fixed:

CVE-2019-9924: Fixed a vulnerability in which shell did not prevent user BASH_CMDS allowing the user to execute any command with the permissions of the shell (bsc#1130324).

Record: SUSE-SU-2019:0838-2
Updated: 2026-11-02

OSVSUSE-SU-2019:0898-1 No score

Security update for bash

This update for bash fixes the following issues:

Security issue fixed:

CVE-2019-9924: Fixed a vulnerability in which shell did not prevent user BASH_CMDS allowing the user to execute any command with the permissions of the shell (bsc#1130324).

Record: SUSE-SU-2019:0898-1
Updated: 2026-11-02

OSVUSN-4058-1 No score

bash vulnerability

It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.

Record: USN-4058-1
Updated: 2026-11-02

OSVUSN-4058-2 No score

bash vulnerability

USN-4058-1 fixed a vulnerability in bash. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.

Record: USN-4058-2
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bash` TuxCare:OracleLinux:6	before 4.1.2-48.el6.tuxcare.els2	4.1.2-48.el6.tuxcare.els2
`bash-doc` TuxCare:OracleLinux:6	before 4.1.2-48.el6.tuxcare.els2	4.1.2-48.el6.tuxcare.els2
`bash` TuxCare:CentOS:6	before 4.1.2-48.el6.tuxcare.els2	4.1.2-48.el6.tuxcare.els2
`bash-doc` TuxCare:CentOS:6	before 4.1.2-48.el6.tuxcare.els2	4.1.2-48.el6.tuxcare.els2
`bash` Debian:12	before 4.4-1	4.4-1
`bash` Debian:13	before 4.4-1	4.4-1
`bash` Debian:14	before 4.4-1	4.4-1
`bash` Debian:8 From an advisory covering 2 CVEs	before 4.3-11+deb8u2, plus listed versions 4.3-114.3-11+deb8u1	4.3-11+deb8u2
`bash` Mageia:6	before 4.3-48.4.mga6	4.3-48.4.mga6
`bash` Red Hat:enterprise_linux:7::client	before 0:4.2.46-34.el7	0:4.2.46-34.el7

Show 52 moreShow less

Affected packages
Package	Affected	Fixed
`bash-debuginfo` Red Hat:enterprise_linux:7::client	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-doc` Red Hat:enterprise_linux:7::client	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash` Red Hat:enterprise_linux:7::computenode	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-doc` Red Hat:enterprise_linux:7::computenode	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash` Red Hat:enterprise_linux:7::server	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-debuginfo` Red Hat:enterprise_linux:7::server	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-doc` Red Hat:enterprise_linux:7::server	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash` Red Hat:enterprise_linux:7::workstation	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash-doc` Red Hat:enterprise_linux:7::workstation	before 0:4.2.46-34.el7	0:4.2.46-34.el7
`bash` Red Hat:rhel_eus:7.6::computenode	before 0:4.2.46-32.el7_6	0:4.2.46-32.el7_6
`bash-debuginfo` Red Hat:rhel_eus:7.6::computenode	before 0:4.2.46-32.el7_6	0:4.2.46-32.el7_6
`bash-doc` Red Hat:rhel_eus:7.6::computenode	before 0:4.2.46-32.el7_6	0:4.2.46-32.el7_6
`bash` Red Hat:rhel_eus:7.6::server	before 0:4.2.46-32.el7_6	0:4.2.46-32.el7_6
`bash-debuginfo` Red Hat:rhel_eus:7.6::server	before 0:4.2.46-32.el7_6	0:4.2.46-32.el7_6
`bash-doc` Red Hat:rhel_eus:7.6::server	before 0:4.2.46-32.el7_6	0:4.2.46-32.el7_6
`bash` Red Hat:rhel_eus:7.7::computenode	before 0:4.2.46-34.el7_7	0:4.2.46-34.el7_7
`bash-debuginfo` Red Hat:rhel_eus:7.7::computenode	before 0:4.2.46-34.el7_7	0:4.2.46-34.el7_7
`bash-doc` Red Hat:rhel_eus:7.7::computenode	before 0:4.2.46-34.el7_7	0:4.2.46-34.el7_7
`bash` Red Hat:rhel_eus:7.7::server	before 0:4.2.46-34.el7_7	0:4.2.46-34.el7_7
`bash-debuginfo` Red Hat:rhel_eus:7.7::server	before 0:4.2.46-34.el7_7	0:4.2.46-34.el7_7
`bash-doc` Red Hat:rhel_eus:7.7::server	before 0:4.2.46-34.el7_7	0:4.2.46-34.el7_7
`bash` Red Hat:rhel_aus:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash-debuginfo` Red Hat:rhel_aus:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash` Red Hat:rhel_e4s:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash-debuginfo` Red Hat:rhel_e4s:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash` Red Hat:rhel_tus:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash-debuginfo` Red Hat:rhel_tus:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash-doc` Red Hat:rhel_aus:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash-doc` Red Hat:rhel_e4s:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash-doc` Red Hat:rhel_tus:7.4::server	before 0:4.2.46-30.el7_4	0:4.2.46-30.el7_4
`bash` SUSE:Linux Enterprise Desktop 12 SP3	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Desktop 12 SP4	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Software Development Kit 12 SP3	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Software Development Kit 12 SP4	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server 12 SP3	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server 12 SP4	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Workstation Extension 12 SP3	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Workstation Extension 12 SP4	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:OpenStack Cloud 7	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server 12 SP2-BCL	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Enterprise Storage 4	before 4.3-83.23.1	4.3-83.23.1
`bash` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 4.2-83.3.1	4.2-83.3.1
`bash` SUSE:Linux Enterprise Server 12-LTSS	before 4.2-83.3.1	4.2-83.3.1
`bash` SUSE:Linux Enterprise Server 12 SP1-LTSS	before 4.2-83.3.1	4.2-83.3.1
`bash` Ubuntu:Pro:14.04:LTS	before 4.3-7ubuntu1.8+esm1, plus listed versions 4.2-5ubuntu34.3-1ubuntu24.3-2ubuntu14.3-3ubuntu14.3-4ubuntu1 Show 11 moreShow less 4.3-4ubuntu24.3-6ubuntu14.3-7ubuntu14.3-7ubuntu1.14.3-7ubuntu1.24.3-7ubuntu1.34.3-7ubuntu1.44.3-7ubuntu1.54.3-7ubuntu1.64.3-7ubuntu1.74.3-7ubuntu1.8	4.3-7ubuntu1.8+esm1
`bash` Ubuntu:16.04:LTS	before 4.3-14ubuntu1.4, plus listed versions 4.3-14ubuntu14.3-14ubuntu1.14.3-14ubuntu1.24.3-14ubuntu1.3	4.3-14ubuntu1.4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-9924 is a high vulnerability (CVSS 7.8) in Gnu Bash, published March 22, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in bash 4.1.2-48.el6.tuxcare.els2.

References

Show 31 moreShow less