Product by GNU
GNU Bourne-Again SHellbash (GNU Bash)
18 known vulnerabilities in GNU Bourne-Again SHellbash (GNU Bash) (GNU), 3 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability In CISA KEV | 8.8 | |
| High | CVE-2016-0634 | GNU Bourne-Again SHellbash (GNU Bash): Code Execution | 7.5 | |
| High | CVE-2019-18276 | GNU Bourne-Again SHellbash (GNU Bash): security vulnerability | 7.8 | |
| Not rated | CVE-2014-7186 | GNU Bourne-Again SHellbash (GNU Bash): Out-of-Bounds Access | — | |
| Not rated | CVE-2014-6277 | GNU Bourne-Again SHellbash (GNU Bash): Use of Uninitialized Memory | — | |
| Not rated | CVE-2014-7187 | GNU Bourne-Again SHellbash (GNU Bash): Out-of-Bounds Access | — | |
| High | CVE-2016-7543 | GNU Bourne-Again SHellbash (GNU Bash): security vulnerability | 8.4 | |
| High | CVE-2012-6711 | GNU Bourne-Again SHellbash (GNU Bash): Heap-Based Buffer Overflow | 7.0 | |
| High | CVE-2017-5932 | GNU Bourne-Again SHellbash (GNU Bash): Privilege Escalation | 7.8 | |
| High | CVE-2022-3715 | Bash: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.8 | |
| High | CVE-2019-9924 | GNU Bourne-Again SHellbash (GNU Bash): security vulnerability | 7.8 | |
| Medium | CVE-2016-9401 | GNU Bourne-Again SHellbash (GNU Bash): Use-After-Free | 5.5 | |
| Not rated | CVE-1999-0491 | GNU Bourne-Again SHellbash (GNU Bash): security vulnerability | — | |
| Not rated | CVE-2010-0002 | GNU Bourne-Again SHellbash (GNU Bash): security vulnerability | — | |
| Not rated | CVE-2012-3410 | GNU Bourne-Again SHellbash (GNU Bash): Stack-Based Buffer Overflow | — | |
| Not rated | CVE-1999-1383 | GNU Bourne-Again SHellbash (GNU Bash): Privilege Escalation | — |