Medium: bash

Issue Overview: rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any command with the permissions of the shell. CVE-2019-9924 Affected Packages: bash Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository...

Amazon Linux AMI : bash (ALAS-2020-1379)

The version of bash installed on the remote host is prior to 4.2.46-34.43. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1379 advisory. rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any comma...