{"id":"CVE-2022-3715","aliases":["ALSA-2023:0340","DEBIAN-CVE-2022-3715","EUVD-2022-43072","GHSA-cr4j-fv7c-759c","OESA-2022-2100","RHSA-2023:0340","RLSA-2023:0340","ROOT-OS-DEBIAN-11-CVE-2022-3715","UBUNTU-CVE-2022-3715","USN-6697-1"],"status":"published","title":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid...","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00384,"percentile":0.32785,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2022-11-18T11:05:25Z","modified":"2026-10-29T11:31:21Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"bash","fixed_in":["5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bash-devel","fixed_in":["5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bash","fixed_in":["5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bash","fixed_in":["5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bash","fixed_in":["5.2-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"bash","fixed_in":["5.1.8-6.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bash","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bash-debuginfo","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bash-debugsource","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bash-debuginfo","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bash-debugsource","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bash-devel","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"bash","fixed_in":["0:5.1.8-6.el9_1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"bash","fixed_in":["5.1-2+deb11u1.root.io.1","5.1-2+deb11u1.root.io.3","5.1-2+deb11u1.root.io.4","5.1-2+deb11u1.root.io.8","5.1-2+deb11u1.root.io.2","5.1-2+deb11u1.root.io.5","5.1-2+deb11u1.root.io.6","5.1-2+deb11u1.root.io.7","5.1-2+deb11u1.root.io.9","5.1-2+deb11u1.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-bash","fixed_in":["5.1-2+deb11u1.root.io.1","5.1-2+deb11u1.root.io.3","5.1-2+deb11u1.root.io.4","5.1-2+deb11u1.root.io.8","5.1-2+deb11u1.root.io.2","5.1-2+deb11u1.root.io.5","5.1-2+deb11u1.root.io.6","5.1-2+deb11u1.root.io.7","5.1-2+deb11u1.root.io.9","5.1-2+deb11u1.aikido.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bash","fixed_in":["5.1-6ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bash-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.8-6.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bash-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bash-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bash-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bash-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bash-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.8-6.el9_1"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-2+deb11u1.root.io.1"},{"fixed":"5.1-2+deb11u1.root.io.3"},{"fixed":"5.1-2+deb11u1.root.io.4"},{"fixed":"5.1-2+deb11u1.root.io.8"},{"fixed":"5.1-2+deb11u1.root.io.2"},{"fixed":"5.1-2+deb11u1.root.io.5"},{"fixed":"5.1-2+deb11u1.root.io.6"},{"fixed":"5.1-2+deb11u1.root.io.7"},{"fixed":"5.1-2+deb11u1.root.io.9"},{"fixed":"5.1-2+deb11u1.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-2+deb11u1.root.io.1"},{"fixed":"5.1-2+deb11u1.root.io.3"},{"fixed":"5.1-2+deb11u1.root.io.4"},{"fixed":"5.1-2+deb11u1.root.io.8"},{"fixed":"5.1-2+deb11u1.root.io.2"},{"fixed":"5.1-2+deb11u1.root.io.5"},{"fixed":"5.1-2+deb11u1.root.io.6"},{"fixed":"5.1-2+deb11u1.root.io.7"},{"fixed":"5.1-2+deb11u1.root.io.9"},{"fixed":"5.1-2+deb11u1.aikido.10"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-6ubuntu1.1"}]}],"versions":["5.1-3ubuntu2","5.1-5ubuntu1","5.1-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-6ubuntu1.1"}]}],"versions":["5.1-3ubuntu2","5.1-5ubuntu1","5.1-6ubuntu1"]}],"products":[{"vendor":"gnu","product":"bash"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126720","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3715","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002"},{"url":"https://github.com/advisories/GHSA-cr4j-fv7c-759c"},{"url":"https://access.redhat.com/errata/RHSA-2023:0340","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3715","tags":["report"]},{"url":"https://bugzilla.redhat.com/2126720","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0340.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3715","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2100","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0340.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3715","tags":["advisory","report"]},{"url":"https://lists.gnu.org/archive/html/bug-bash/2022-08/msg00147.html","tags":["article","report"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0340","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-3715","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6697-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-3715","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T00:00:00Z","modified":"2026-10-14T13:51:52.078Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-43072","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T00:00:00Z","modified":"2026-10-14T13:51:52Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:15.581093Z"}],"ghsa":[{"id":"GHSA-cr4j-fv7c-759c","title":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid...","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T15:30:29Z","modified":"2026-10-14T15:31:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2022-3715","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T15:15:10.41Z","modified":"2026-10-14T14:17:27.477Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:07:34.758863Z"}],"osv":[{"id":"CVE-2022-3715","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T15:15:10.41Z","modified":"2026-03-14T11:50:33.048139Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"OESA-2022-2100","title":"bash security update","description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the bash package, where a heap-buffer overflow can occur in valid_parameter_transform. This issue may lead to memory problems.(CVE-2022-3715)","status":"published","published":"2022-11-18T11:05:25Z","modified":"2026-08-18T01:17:26.824613185Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:0340","title":"Red Hat Security Advisory: bash security update","status":"published","published":"2024-09-16T09:52:59Z","modified":"2026-06-27T10:16:28Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RLSA-2023:0340","title":"Moderate: bash security update","description":"The bash packages provide Bash (Bourne-again shell), which is the default shell for Rocky Linux.\n\nSecurity Fix(es):\n\n* bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T14:30:41Z","modified":"2026-02-04T07:40:26.684428Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2022-3715","title":"CVE-2022-3715 in bash - Patched by Root","description":"Root has patched CVE-2022-3715 in the bash package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-20T12:09:05Z","modified":"2026-08-20T13:30:05.356572059Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"UBUNTU-CVE-2022-3715","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T15:15:00Z","modified":"2026-02-04T02:16:12.817581Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2023:0340","title":"Moderate: bash security update","description":"The bash packages provide Bash (Bourne-again shell), which is the default shell for AlmaLinux.\n\nSecurity Fix(es):\n\n* bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:31:21.896458716Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DEBIAN-CVE-2022-3715","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.","status":"published","published":"2023-01-05T15:15:10.41Z","modified":"2026-11-03T06:02:43.655166121Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"USN-6697-1","title":"bash vulnerability","description":"It was discovered that Bash incorrectly handled certain memory operations\nwhen processing commands. If a user or automated system were tricked into\nrunning a specially crafted bash file, a remote attacker could use this\nissue to cause Bash to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2024-03-18T13:00:33Z","modified":"2026-02-10T04:43:37Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}