Red Hat Security AdvisoryRHSA-2020:3474
bash security update
Released 2020-08-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bash-4.2.46-32.el7_6
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) bash-doc-4.2.46-32.el7_6
- Red Hat Enterprise Linux Server EUS (v. 7.6) bash-4.2.46-32.el7_6
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) bash-doc-4.2.46-32.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) bash-4.2.46-32.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bash-doc-4.2.46-32.el7_6
Fixes 1 record
Priority LOW 34
rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00402 · Published 2019-03-22 · Partial fix CWE-862