Known vulnerabilities in bash (Red Hat package)
Vendor:
Red Hat Inc.
Software:
bash (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:bash_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
5.1.8-9.el9
3.2-32.el5_9.3.sjis.1
3.2-33.el5_11.1.sjis.2
4.1.2-15.el6_5.1.sjis.2
3.0-27.el4.4
3.2-24.el5_6.2
4.1.2-9.el6_2.2
3.2-32.el5_9.3
4.1.2-15.el6_4.2
3.2-33.el5_11.1.sjis.1
4.1.2-15.el6_5.1.sjis.1
3.0-27.el4.2
3.2-24.el5_6.1
4.1.2-9.el6_2.1
3.2-32.el5_9.2
4.1.2-15.el6_4.1
4.2.46-34.el7_7
5.1.8-6.el9_1
4.4.19-14.el8
4.2.46-30.el7_4
4.2.46-32.el7_6
4.2.46-34.el7
4.2.46-28.el7
3.0-27.el4
3.2-32.el5
4.2.46-31.el7_6
4.2.46-30.el7_5
4.2.46-29.el7_4
4.2.46-21.el7_3
4.2.46-20.el7_2
4.2.46-19.el7
4.1.2-48.el6
4.1.2-40.el6
4.1.2-33.el6
4.1.2-29.el6
4.1.2-14.el6
4.1.2-3.el6
4.1.2-48.el6_9
4.1.2-41.el6_8
4.1.2-40.el6_8
4.1.2-33.el6_7
4.1.2-29.el6_6
4.1.2-15.el6_5
4.1.2-15.el6_4
4.1.2-14.el6_4
4.1.2-9.el6_2
4.1.2-8.el6
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71454 - Heap-based Buffer Overflow CVE-2022-3715 |
CWE-122 | Low | 5.1.8-6.el9_1 | 23.01.2023 |
SB2023012382 SB2023012383 SB2023021625 and 14 more |
||
| #VU24690 - Improper Check for Dropped Privileges CVE-2019-18276 |
CWE-273 | Low | 4.4.19-14.el8 | 28.01.2020 |
SB2019112815 SB2020012803 SB2021052032 and 14 more |
||
| #VU21785 - Improper input validation CVE-2019-9924 |
CWE-20 | Low | 4.2.46-30.el7_4, 4.2.46-32.el7_6, 4.2.46-34.el7, 4.2.46-34.el7_7 | 15.10.2019 |
SB2019032210 SB2019040917 SB2020040114 and 11 more |
||
| #VU13103 - Improper input validation CVE-2016-0634 |
CWE-20 | High | 4.1.2-48.el6 | 28.05.2018 |
SB2018052514 SB2016121354 SB2017090814 and 9 more |
||
| #VU13104 - Command injection CVE-2016-7543 |
CWE-77 | Low | 4.1.2-48.el6 | 28.05.2018 |
SB2018052514 SB2017080113 SB2017090814 and 10 more |
||
| #VU33511 - Use After Free CVE-2016-9401 |
CWE-416 | Low | 4.1.2-48.el6 | 23.01.2017 |
SB2017011343 SB2017083137 SB2017010103 and 3 more |