Red Hat Security AdvisoryRHSA-2020:1113
bash security update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bash-4.2.46-34.el7
- Red Hat Enterprise Linux Client Optional (v. 7) bash-doc-4.2.46-34.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) bash-4.2.46-34.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bash-doc-4.2.46-34.el7
- Red Hat Enterprise Linux Server (v. 7) bash-4.2.46-34.el7
- Red Hat Enterprise Linux Server Optional (v. 7) bash-doc-4.2.46-34.el7
- Red Hat Enterprise Linux Workstation (v. 7) bash-4.2.46-34.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) bash-doc-4.2.46-34.el7
Fixes 1 record
Priority LOW 34
rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00402 · Published 2019-03-22 · Partial fix CWE-862
