漏洞历史说明了什么
Bash 有 18 个 CVE 记录，其中包括 KEV 列表中的 3 个条目，最高 CVSS 得分达到 10.0，最新报告的 CVE 时间为 2023-01-05。
如何保障安全
运维人员应保持受支持的发布版本，并密切跟踪已部署的版本，以确保及时应用关键更新。
检查您的版本
bash --version受影响的版本系列
- 5.1 1 个 CVE
- 5.0 2 个 CVE
- 4.4 4 个 CVE
- 4.3 8 个 CVE KEV 1
- 4.2 12 个 CVE KEV 3
- 4.1 11 个 CVE KEV 3
- 4.0 11 个 CVE KEV 3
- 3.2 11 个 CVE KEV 3
- 3.1 10 个 CVE KEV 3
- 3.0 11 个 CVE KEV 3
- 2.05 12 个 CVE KEV 3
- 2.04 10 个 CVE KEV 3
- 2.03 11 个 CVE KEV 3
- 2.02 11 个 CVE KEV 3
- 2.01 11 个 CVE KEV 3
- 2.0 11 个 CVE KEV 3
- 1.14 12 个 CVE KEV 3
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2014-6278 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment vari... | = 1.14.0 = 1.14.1 = 1.14.2 | 8.8 | KEV | 99.7% | 2014-09-30 |
| CVE-2014-7169 | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the... | ≤ 4.3 | 9.8 | KEV | 99.9% | 2014-09-25 |
| CVE-2014-6271 | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variab... | ≤ 4.3 | 9.8 | KEV | 100.0% | 2014-09-24 |
| CVE-2022-3715 | A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. Thi... | ≥ 5.1 < 5.1.8 | 7.8 | — | 2023-01-05 | |
| CVE-2019-18276 | An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash... | ≤ 5.0 = 5.0 | 7.8 | — | 2019-11-28 | |
| CVE-2012-6711 | A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current... | ≥ 4.2 ≤ 4.3 | 7.8 | — | 2019-06-18 | |
| CVE-2019-9924 | rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user... | < 4.4 = 4.4 | 7.8 | — | 2019-03-22 | |
| CVE-2016-0634 | The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary... | = 4.3 | 7.5 | — | 2017-08-28 | |
| CVE-2017-5932 | The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename start... | = 4.4 | 7.8 | — | 2017-03-27 | |
| CVE-2016-9401 | popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted a... | < 4.4 = 4.4 | 5.5 | — | 2017-01-23 | |
| CVE-2016-7543 | Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS an... | ≤ 4.3 | 8.4 | — | 2017-01-19 | |
| CVE-2014-7186 | The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause... | = 1.14.0 = 1.14.1 = 1.14.2 | 10.0 | — | 2014-09-28 | |
| CVE-2014-7187 | Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote a... | = 1.14.0 = 1.14.1 = 1.14.2 | 10.0 | — | 2014-09-28 | |
| CVE-2014-6277 | GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment vari... | = 1.14.0 = 1.14.1 = 1.14.2 | 10.0 | — | 2014-09-27 | |
| CVE-2012-3410 | Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to byp... | = 4.2 | 4.6 | — | 2012-08-27 | |
| CVE-2010-0002 | The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 en... | = 2.05 = 3.0 = 3.2 | 2.1 | — | 2010-01-14 | |
| CVE-1999-0491 | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory wit... | ≤ 2.04 = 1.14.0 = 1.14.1 | 4.6 | — | 1999-04-20 | |
| CVE-1999-1383 | (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contai... | ≤ 1.14.6 = 1.14.0 = 1.14.1 | 4.6 | — | 1996-09-13 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。