Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-5932

Fixed in a distro release EPSS <1%

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.

Published 2017-03-27 · CVE record · OSV

Products: gnu bash

Distro releases

ReleasePackageFixed in
Debian 12bash4.4-3
Debian 13bash4.4-3
Debian 14bash4.4-3
Ubuntu 14.04 LTSbash4.3-7ubuntu1.7
Ubuntu 16.04 LTSbash4.3-14ubuntu1.2