Lucene search
OracleLinuxELSA-2017-1931HistoryAug 07, 2017 - 12:00 a.m.
bash security and bug fix update
2017-08-0700:00:00
linux.oracle.com
36
8.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
85.8%
[4.2.46-28]
- CVE-2016-9401 - Fix crash when ‘-’ is passed as second sign to popd
Resolves: #1429838
[4.2.46-27]
- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
Resolves: #1426026
[4.2.46-26]
- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
Resolves: #1379237
[4.2.46-25]
- Plug a leak related to compound assignments
Resolves: #1264101
[4.2.46-24]
- Recognize cd -e
Resolves: #1267478
[4.2.46-23]
- Add a condition before setting pipeline_pgrp to shell_pgrp
Resolves: #1377496
[4.2.46-22]
- Avoid crash in parameter expansion while expanding long strings
Resolves: #1403255
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | bash | < 4.2.46-28.el7 | bash-4.2.46-28.el7.src.rpm |
| oracle linux | 7 | aarch64 | bash | < 4.2.46-28.el7 | bash-4.2.46-28.el7.aarch64.rpm |
| oracle linux | 7 | aarch64 | bash-doc | < 4.2.46-28.el7 | bash-doc-4.2.46-28.el7.aarch64.rpm |
| oracle linux | 7 | src | bash | < 4.2.46-28.el7 | bash-4.2.46-28.el7.src.rpm |
| oracle linux | 7 | x86_64 | bash | < 4.2.46-28.el7 | bash-4.2.46-28.el7.x86_64.rpm |
| oracle linux | 7 | x86_64 | bash-doc | < 4.2.46-28.el7 | bash-doc-4.2.46-28.el7.x86_64.rpm |
Related
nessus
nessus
Scientific Linux Security Update : bash on SL7.x x86_64 (20170801)
2017-08-22 00:00:00
RHEL 6 : bash (RHSA-2017:0725)
2017-03-22 00:00:00
Oracle Linux 7 : bash (ELSA-2017-1931)
2017-08-09 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for bash (EulerOS-SA-2017-1163)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for bash (EulerOS-SA-2017-1164)
2020-01-23 00:00:00
RedHat Update for bash RHSA-2017:0725-01
2017-03-22 00:00:00
ibm
ibm
oraclelinux
oraclelinux
bash security and bug fix update
2017-03-27 00:00:00
centos
centos
bash security update
2017-08-24 01:36:04
bash security update
2017-03-24 15:27:21
redhat
redhat
(RHSA-2017:0725) Moderate: bash security and bug fix update
2017-03-21 06:17:48
(RHSA-2017:1931) Moderate: bash security and bug fix update
2017-08-01 05:56:24
amazon
amazon
Medium: bash
2017-08-31 15:53:00
ubuntu
ubuntu
Bash vulnerabilities
2017-05-17 00:00:00
Bash vulnerability
2017-08-01 00:00:00
cloudfoundry
cloudfoundry
USN-3294-1: Bash vulnerabilities | Cloud Foundry
2017-06-02 00:00:00
gentoo
gentoo
Bash: Multiple vulnerabilities
2017-01-01 00:00:00
Bash: Arbitrary code execution
2016-12-13 00:00:00
mageia
mageia
Updated bash packages fix security vulnerability
2016-11-22 01:18:01
Updated bash packages fix security vulnerability
2017-01-06 11:28:18
suse
suse
Security update for bash (moderate)
2018-05-25 11:30:58
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
slackware
slackware
[slackware-security] bash
2017-09-08 18:06:14
osv
osv
CVE-2016-9401
2017-01-23 21:59:02
bash - security update
2016-10-26 00:00:00
bash - version number correction
2016-10-26 00:00:00
redhatcve
redhatcve
CVE-2016-9401
2016-11-18 09:17:17
CVE-2016-7543
2016-09-27 09:47:30
veracode
veracode
Authorization Bypass
2019-05-02 05:51:56
Privilege Escalation
2019-05-02 05:51:56
Arbitrary Code Execution
2019-01-15 09:16:35
ubuntucve
ubuntucve
cve
cve
prion
prion
Authentication flaw
2017-01-23 21:59:00
Design/Logic Flaw
2017-01-19 20:59:00
Code injection
2017-08-28 15:29:00
alpinelinux
alpinelinux
CVE-2016-9401
2017-01-23 21:59:00
CVE-2016-0634
2017-08-28 15:29:00
debiancve
debiancve
fedora
fedora
[SECURITY] Fedora 24 Update: bash-4.3.42-7.fc24
2016-10-03 03:51:30
[SECURITY] Fedora 23 Update: bash-4.3.42-5.fc23
2016-10-13 02:58:17
[SECURITY] Fedora 25 Update: bash-4.3.43-4.fc25
2016-10-09 03:10:49
f5
f5
K73705133 : Bash vulnerability CVE-2016-7543
2017-01-27 00:00:00
debian
debian
[SECURITY] [DLA 680-2] bash version number correction
2016-10-28 21:43:28
[SECURITY] [DLA 680-1] bash security update
2016-10-26 19:27:54
[SECURITY] [DLA 1726-1] bash security update
2019-03-25 11:55:51
photon
photon
kitploit
kitploit
8.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
85.8%
Related for ELSA-2017-1931