bash vulnerabilities
CVEs whose affected-version data names the bash package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2022-3715High· 7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
▾ Twilightgnu · bashEPSS 0.36%via NVD
CVE-2019-18276High· 7.8PoCAn issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. …
▾ Midnightgnu · bashEPSS 2.6%via NVD