Lucene search
OracleLinuxELSA-2017-0725HistoryMar 27, 2017 - 12:00 a.m.
bash security and bug fix update
2017-03-2700:00:00
linux.oracle.com
24
8.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
85.8%
[4.1.2-48]
- Fix signal handling in read builtin
Resolves: #1421926
[4.1.2-47] - CVE-2016-9401 - Fix crash when ‘-’ is passed as second sign to popd
Resolves: #1396383
[4.1.2-46] - CVE-2016-7543 - Fix for arbitrary code execution via SHELLOPTS+PS4 variables
Resolves: #1379630
[4.1.2-45] - CVE-2016-0634 - Fix for arbitrary code execution via malicious hostname
Resolves: #1377613
[4.1.2-44] - Avoid crash in parameter expansion while expanding long strings
Resolves: #1359142
[4.1.2-43] - Stop reading input when SIGHUP is received
Resolves: #1325753
[4.1.2-42] - Bash leaks memory while doing pattern removal in parameter expansion
Resolves: #1283829
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 6 | src | bash | < 4.1.2-48.el6 | bash-4.1.2-48.el6.src.rpm |
| oracle linux | 6 | i686 | bash | < 4.1.2-48.el6 | bash-4.1.2-48.el6.i686.rpm |
| oracle linux | 6 | i686 | bash-doc | < 4.1.2-48.el6 | bash-doc-4.1.2-48.el6.i686.rpm |
| oracle linux | 6 | src | bash | < 4.1.2-48.el6 | bash-4.1.2-48.el6.src.rpm |
| oracle linux | 6 | x86_64 | bash | < 4.1.2-48.el6 | bash-4.1.2-48.el6.x86_64.rpm |
| oracle linux | 6 | x86_64 | bash-doc | < 4.1.2-48.el6 | bash-doc-4.1.2-48.el6.x86_64.rpm |
Related
nessus
nessus
Scientific Linux Security Update : bash on SL7.x x86_64 (20170801)
2017-08-22 00:00:00
RHEL 6 : bash (RHSA-2017:0725)
2017-03-22 00:00:00
Oracle Linux 7 : bash (ELSA-2017-1931)
2017-08-09 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for bash (EulerOS-SA-2017-1163)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for bash (EulerOS-SA-2017-1164)
2020-01-23 00:00:00
RedHat Update for bash RHSA-2017:1931-01
2017-08-04 00:00:00
oraclelinux
oraclelinux
bash security and bug fix update
2017-08-07 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in GNU Bash affect PowerKVM
2018-06-18 01:37:30
centos
centos
bash security update
2017-08-24 01:36:04
bash security update
2017-03-24 15:27:21
redhat
redhat
(RHSA-2017:1931) Moderate: bash security and bug fix update
2017-08-01 05:56:24
(RHSA-2017:0725) Moderate: bash security and bug fix update
2017-03-21 06:17:48
amazon
amazon
Medium: bash
2017-08-31 15:53:00
ubuntu
ubuntu
Bash vulnerabilities
2017-05-17 00:00:00
Bash vulnerability
2017-08-01 00:00:00
cloudfoundry
cloudfoundry
USN-3294-1: Bash vulnerabilities | Cloud Foundry
2017-06-02 00:00:00
gentoo
gentoo
Bash: Multiple vulnerabilities
2017-01-01 00:00:00
Bash: Arbitrary code execution
2016-12-13 00:00:00
mageia
mageia
Updated bash packages fix security vulnerability
2016-11-22 01:18:01
Updated bash packages fix security vulnerability
2017-01-06 11:28:18
slackware
slackware
[slackware-security] bash
2017-09-08 18:06:14
suse
suse
Security update for bash (moderate)
2018-05-25 11:30:58
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
osv
osv
CVE-2016-9401
2017-01-23 21:59:02
bash - security update
2016-10-26 00:00:00
bash - version number correction
2016-10-26 00:00:00
redhatcve
redhatcve
CVE-2016-9401
2016-11-18 09:17:17
CVE-2016-7543
2016-09-27 09:47:30
veracode
veracode
Authorization Bypass
2019-05-02 05:51:56
Privilege Escalation
2019-05-02 05:51:56
Arbitrary Code Execution
2019-01-15 09:16:35
cve
cve
ubuntucve
ubuntucve
fedora
fedora
[SECURITY] Fedora 24 Update: bash-4.3.42-7.fc24
2016-10-03 03:51:30
[SECURITY] Fedora 23 Update: bash-4.3.42-5.fc23
2016-10-13 02:58:17
[SECURITY] Fedora 25 Update: bash-4.3.43-4.fc25
2016-10-09 03:10:49
f5
f5
K73705133 : Bash vulnerability CVE-2016-7543
2017-01-27 00:00:00
debian
debian
[SECURITY] [DLA 680-2] bash version number correction
2016-10-28 21:43:28
[SECURITY] [DLA 680-1] bash security update
2016-10-26 19:27:54
[SECURITY] [DLA 1726-1] bash security update
2019-03-25 11:55:51
debiancve
debiancve
prion
prion
Authentication flaw
2017-01-23 21:59:00
Design/Logic Flaw
2017-01-19 20:59:00
Code injection
2017-08-28 15:29:00
alpinelinux
alpinelinux
CVE-2016-9401
2017-01-23 21:59:00
CVE-2016-0634
2017-08-28 15:29:00
photon
photon
kitploit
kitploit
8.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
85.8%
Related for ELSA-2017-0725