Lucene search
GoogleOSV:CVE-2019-14868HistoryApr 02, 2020 - 5:15 p.m.
CVE-2019-14868
2020-04-0217:15:13
Google
osv.dev
3
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables could allow them to exploit this issue remotely.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ast | eq | ksh93 | |
| ast | eq | 2017.0.0-devel | |
| ast | eq | 93u | |
| ast | eq | 2020.0.0-beta1 | |
| ast | eq | ksh93u | |
| ast | eq | 2020.0.0-alpha1 | |
| ast | eq | 93 |
Related
nessus
nessus
RHEL 8 : ksh (RHSA-2020:0431)
2020-02-06 00:00:00
CentOS 7 : ksh (CESA-2020:0568)
2020-02-27 00:00:00
RHEL 8 : ksh (RHSA-2020:0559)
2020-02-24 00:00:00
centos
centos
ksh security update
2020-02-18 16:29:10
ksh security update
2020-02-26 17:14:16
openvas
openvas
Huawei EulerOS: Security Advisory for ksh (EulerOS-SA-2020-1681)
2020-06-16 00:00:00
Huawei EulerOS: Security Advisory for ksh (EulerOS-SA-2020-2446)
2020-11-05 00:00:00
CentOS: Security Advisory for ksh (CESA-2020:0568)
2020-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: ksh-2020.0.0-2.fc30
2020-02-16 01:09:45
[SECURITY] Fedora 31 Update: ksh-2020.0.0-2.fc31
2020-02-16 01:30:26
redhat
redhat
(RHSA-2020:5351) Important: ksh security update
2020-12-07 10:51:15
(RHSA-2020:5352) Important: ksh security update
2020-12-07 10:49:06
(RHSA-2020:0431) Important: ksh security update
2020-02-05 12:00:45
osv
osv
ksh - security update
2020-07-21 00:00:00
freebsd
freebsd
oraclelinux
oraclelinux
ksh security update
2020-02-18 00:00:00
ksh security update
2020-02-20 00:00:00
ksh security update
2020-02-25 00:00:00
ubuntucve
ubuntucve
CVE-2019-14868
2020-04-02 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-02-06 00:26:26
prion
prion
Design/Logic Flaw
2020-04-02 17:15:00
nvd
nvd
CVE-2019-14868
2020-04-02 17:15:13
archlinux
archlinux
[ASA-202002-4] ksh: arbitrary command execution
2020-02-08 00:00:00
debiancve
debiancve
CVE-2019-14868
2020-04-02 17:15:13
cve
cve
CVE-2019-14868
2020-04-02 17:15:13
redhatcve
redhatcve
CVE-2019-14868
2020-04-01 14:08:51
mageia
mageia
Updated ksh packages fix security vulnerability
2021-03-17 14:01:53
rosalinux
rosalinux
Advisory ROSA-SA-2021-1860
2021-07-02 17:08:19
cvelist
cvelist
CVE-2019-14868
2020-04-02 16:48:57
debian
debian
[SECURITY] [DLA 2284-1] ksh security update
2020-07-20 21:44:39
