Bash: Privilege escalation

🗓️ 26 May 2021 00:00:00Reported by Gentoo FoundationType

Bash privilege escalation, Bash incorrectly dropped privileges by setting effective UID to real UID, local attacker could escalate privileges, upgrade to latest version

Reporter	Title	Published	Views	Family All 87
IBM Security Bulletins	Security Bulletin: Vulnerability in Bash (CVE-2019-18276) affects HMC	22 Nov 202106:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
0day.today	Bash 5.0 Patch 11 - SUID Priv Drop Exploit	29 Nov 201900:00	–	zdt
BDU FSTEC	The vulnerability of the disable_priv_mode command in the GNU Bash shell, related to improper checking of deleted privileges, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.	14 Apr 202000:00	–	bdu_fstec
CBLMariner	CVE-2019-18276 affecting package bash 4.4.23-1	30 Nov 202019:30	–	cbl_mariner
Tenable Nessus	CentOS 8 : bash (CESA-2021:1679)	19 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : bash (EulerOS-SA-2020-1140)	25 Feb 202000:00	–	nessus