Known vulnerabilities in Bash

Vendor: GNU
Software: Bash
Software CPE: cpe:2.3:a:gnu:bash:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 7
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bash Bash is affected by 13 known vulnerabilities: 6 critical, 1 medium, 6 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109674 - Heap-based Buffer Overflow
CVE-2012-6711
CWE-122 Low
No
No
4.3 23.05.2025 SB2019061837
SB2025052602
#VU71454 - Heap-based Buffer Overflow
CVE-2022-3715
CWE-122 Low
No
No
5.2 23.01.2023 SB2023012382
SB2023012383
SB2023021625
and 14 more
#VU24690 - Improper Check for Dropped Privileges
CVE-2019-18276
CWE-273 Low
Available
No
- 28.01.2020 SB2019112815
SB2020012803
SB2021052032
and 14 more
#VU21785 - Improper input validation
CVE-2019-9924
CWE-20 Low
No
No
4.4 beta2 15.10.2019 SB2019032210
SB2019040917
SB2020040114
and 11 more
#VU39367 - Improper input validation
CVE-2017-5932
CWE-20 Low
No
No
- 27.03.2017 SB2017032711
SB2023121104
SB2024080237
and 1 more
#VU5653 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
- 07.02.2017 SB2017020701
#VU5328 - Off-by-one Error
CVE-2014-7187
CWE-193 Critical
Available
No
- 24.01.2017 SB2014091201
SB2015092701
SB2014100401
and 24 more
#VU5327 - Memory corruption
CVE-2014-7186
CWE-119 Critical
Available
No
- 24.01.2017 SB2014091201
SB2015092701
SB2014100401
and 26 more
#VU5322 - Command injection
CVE-2014-6278
CWE-77 Critical
Available
Exploited
- 24.01.2017 SB2014091201
SB2015100901
SB2014100401
and 19 more
#VU5310 - Memory corruption
CVE-2014-6277
CWE-119 Critical
Available
No
- 24.01.2017 SB2014091201
SB2015100901
SB2014100401
and 18 more
#VU5295 - Command injection
CVE-2014-6271
CWE-77 Critical
Available
Exploited
- 24.01.2017 SB2014091201
SB2015092401
SB2015092613
and 46 more
#VU5294 - Command injection
CVE-2014-7169
CWE-77 Critical
Available
Exploited
- 24.01.2017 SB2014091201
SB2015092501
SB2015092502
and 37 more
#VU32768 - Stack-based buffer overflow
CVE-2012-3410
CWE-121 Medium
No
No
4.2 28.08.2012 SB2012082801
SB2012091811
SB2014092505