Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rosalinuxROSA LABROSA-SA-2021-1860
HistoryJul 02, 2021 - 5:08 p.m.

Advisory ROSA-SA-2021-1860

2021-07-0217:08:19
ROSA LAB
abf.rosalinux.ru
4

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.6%

JSON

Software: ksh 20120801
OS: Cobalt 7.9

CVE-ID: CVE-2019-14868
CVE-Crit: HIGH
CVE-DESC: a bug was discovered in ksh version 20120801 in the way certain environment variables are evaluated. An attacker could exploit this vulnerability to override or bypass environment restrictions to execute shell commands. Services and applications that allow unauthenticated remote attackers to provide one of these environment variables could allow them to exploit this issue remotely.
CVE-STATUS: default
CVE-REV: Default

OSVersionArchitecturePackageVersionFilename
Cobaltanynoarchksh< 20120801UNKNOWN

Related

nessus 33
osv 2
openvas 15
redhat 9
fedora 2
centos 2
redhatcve 1
debian 1
cve 1
mageia 1
prion 1
oraclelinux 3
veracode 1
ubuntucve 1
freebsd 1
debiancve 1
archlinux 1
apple 2
nessus
nessus
RHEL 7 : ksh (RHSA-2020:2210)
2020-05-20 00:00:00
RHEL 7 : ksh (RHSA-2020:1333)
2020-04-06 00:00:00
RHEL 7 : ksh (RHSA-2020:5352)
2020-12-09 00:00:00
osv
osv
ksh - security update
2020-07-21 00:00:00
CVE-2019-14868
2020-04-02 17:15:13
openvas
openvas
Huawei EulerOS: Security Advisory for ksh (EulerOS-SA-2020-1921)
2020-09-04 00:00:00
Huawei EulerOS: Security Advisory for ksh (EulerOS-SA-2020-1583)
2020-05-26 00:00:00
CentOS: Security Advisory for ksh (CESA-2020:0568)
2020-02-27 00:00:00
redhat
redhat
(RHSA-2020:5351) Important: ksh security update
2020-12-07 10:51:15
(RHSA-2020:2210) Important: ksh security update
2020-05-19 13:15:52
(RHSA-2020:0559) Important: ksh security update
2020-02-20 09:48:48
fedora
fedora
[SECURITY] Fedora 30 Update: ksh-2020.0.0-2.fc30
2020-02-16 01:09:45
[SECURITY] Fedora 31 Update: ksh-2020.0.0-2.fc31
2020-02-16 01:30:26
centos
centos
ksh security update
2020-02-18 16:29:10
ksh security update
2020-02-26 17:14:16
redhatcve
redhatcve
CVE-2019-14868
2020-04-01 14:08:51
debian
debian
[SECURITY] [DLA 2284-1] ksh security update
2020-07-20 21:44:39
cve
cve
CVE-2019-14868
2020-04-02 17:15:00
mageia
mageia
Updated ksh packages fix security vulnerability
2021-03-17 14:01:53
prion
prion
Design/Logic Flaw
2020-04-02 17:15:00
oraclelinux
oraclelinux
ksh security update
2020-02-18 00:00:00
ksh security update
2020-02-25 00:00:00
ksh security update
2020-02-20 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-02-06 00:26:26
ubuntucve
ubuntucve
CVE-2019-14868
2020-04-02 00:00:00
freebsd
freebsd
ksh93 -- certain environment variables interpreted as arithmetic expressions on startup, leading to code injection
2019-10-01 00:00:00
debiancve
debiancve
CVE-2019-14868
2020-04-02 17:15:00
archlinux
archlinux
[ASA-202002-4] ksh: arbitrary command execution
2020-02-08 00:00:00
apple
apple
About the security content of macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra
2020-05-26 00:00:00
About the security content of macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra - Apple Support
2020-09-21 04:32:17

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.6%

JSON
Related for ROSA-SA-2021-1860
nessus33osv2openvas15redhat9fedora2centos2redhatcve1debian1cve1mageia1prion1oraclelinux3veracode1ubuntucve1freebsd1debiancve1archlinux1apple2