Stephane Chazelas discovered that Bash incorrectly handled trailing code in
function definitions. An attacker could use this issue to bypass
environment restrictions, such as SSH forced command environments.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 14.04 | noarch | bash | < 4.3-7ubuntu1.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | bash-builtins | < 4.3-7ubuntu1.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | bash-static | < 4.3-7ubuntu1.1 | UNKNOWN |
Ubuntu | 12.04 | noarch | bash | < 4.2-2ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | bash-builtins | < 4.2-2ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | bash-static | < 4.2-2ubuntu2.2 | UNKNOWN |
Ubuntu | 10.04 | noarch | bash | < 4.1-2ubuntu3.1 | UNKNOWN |
Ubuntu | 10.04 | noarch | bash-builtins | < 4.1-2ubuntu3.1 | UNKNOWN |
Ubuntu | 10.04 | noarch | bash-static | < 4.1-2ubuntu3.1 | UNKNOWN |
10 High
AI Score
Confidence
0.976 High
EPSS
Percentile
100.0%