Comprueba tu versión
bash --versionCVE que afectan a 4.1
| CVE | Título | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|
| CVE-2014-6271 | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variab... | 9.8 | KEV | 100.0% | 2014-09-24 |
| CVE-2014-7169 | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the... | 9.8 | KEV | 99.9% | 2014-09-25 |
| CVE-2014-6278 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment vari... | 8.8 | KEV | 99.7% | 2014-09-30 |
| CVE-2014-7186 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause... | 10.0 | — | 2014-09-28 | |
| CVE-2014-7187 | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote a... | 10.0 | — | 2014-09-28 | |
| CVE-2014-6277 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment vari... | 10.0 | — | 2014-09-27 | |
| CVE-2016-7543 | Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS an... | 8.4 | — | 2017-01-19 | |
| CVE-2019-18276 | An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash... | 7.8 | — | 2019-11-28 | |
| CVE-2019-9924 | rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user... | 7.8 | — | 2019-03-22 | |
| CVE-2012-6711 | A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current... | 7.8 | — | 2019-06-18 | |
| CVE-2016-9401 | popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted a... | 5.5 | — | 2017-01-23 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).