Gnu Bash vulnerabilities

• gnu bash, redhat enterprise linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more A flaw was found in the bash package, where a heap-buffer overflow can occur in valid... CVE-2022-3715 Fix available 7.8 HighNovember 18, 2022
• gnu bash, netapp hci management node, oncommand unified manager +5 more +7 more An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By... CVE-2019-18276 Public exploitFix available 7.8 HighNovember 28, 2019
• gnu bash, redhat enterprise linux +1 more A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by... CVE-2012-6711 Fix available 7.0 HighJune 18, 2019
• gnu bash, canonical ubuntu linux, debian linux +3 more +5 more rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus... CVE-2019-9924 Fix available 7.8 HighMarch 22, 2019
• gnu bash The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted... CVE-2017-5932 Fix available 7.8 HighMarch 27, 2017
• gnu bash, debian linux, redhat enterprise linux desktop +5 more +7 more popd in bash might allow local users to bypass the restricted shell and cause a use-after-free... CVE-2016-9401 Fix available 5.5 MediumJanuary 6, 2017
• gnu bash, fedoraproject fedora +1 more Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted... CVE-2016-7543 Fix available 8.4 HighOctober 26, 2016
• gnu bash The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to... CVE-2016-0634 Fix available 7.5 HighSeptember 16, 2016
• gnu bash GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of... CVE-2014-6278 In KEVPublic exploitFix available EPSS 99.7% 10.0 HighSeptember 30, 2014
• gnu bash GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of... CVE-2014-6277 Public exploitFix available EPSS 64.3% 10.0 HighSeptember 27, 2014
• gnu bash Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026... CVE-2014-7187 Public exploitFix available EPSS 60.3% 10.0 HighSeptember 25, 2014
• gnu bash The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote... CVE-2014-7186 Public exploitFix available EPSS 64.3% 10.0 HighSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... CVE-2014-7169 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... CVE-2014-6271 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalSeptember 24, 2014
• gnu bash Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local... CVE-2012-3410 Fix available 4.6 MediumAugust 27, 2012
• gnu bash The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2... CVE-2010-0002 Public exploit 2.1 LowJanuary 14, 2010
• gnu bash The prompt parsing in bash allows a local user to execute commands as another user by creating a... CVE-1999-0491 Public exploit 4.6 MediumApril 20, 1999
• gnu bash, tcsh +1 more (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory... CVE-1999-1383 4.6 MediumSeptember 13, 1996