UBUNTU-CVE-2019-18276

🗓️ 28 Nov 2019 01:15:00Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Bash bug lets a loaded builtin regain privileges via set user id when the effective user id differs; saved user id not dropped.

Reporter	Title	Published	Views	Family All 87
IBM Security Bulletins	Security Bulletin: Vulnerability in Bash (CVE-2019-18276) affects HMC	22 Nov 202106:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
0day.today	Bash 5.0 Patch 11 - SUID Priv Drop Exploit	29 Nov 201900:00	–	zdt
BDU FSTEC	The vulnerability of the disable_priv_mode command in the GNU Bash shell, related to improper checking of deleted privileges, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.	14 Apr 202000:00	–	bdu_fstec
CBLMariner	CVE-2019-18276 affecting package bash 4.4.23-1	30 Nov 202019:30	–	cbl_mariner
Tenable Nessus	CentOS 8 : bash (CESA-2021:1679)	19 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : bash (EulerOS-SA-2020-1140)	25 Feb 202000:00	–	nessus