CVE-2017-5932
Fixed in a distro release EPSS <1%
The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.
Products: gnu bash
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bash | 4.4-3 |
| Debian 13 | bash | 4.4-3 |
| Debian 14 | bash | 4.4-3 |
| Ubuntu 14.04 LTS | bash | 4.3-7ubuntu1.7 |
| Ubuntu 16.04 LTS | bash | 4.3-14ubuntu1.2 |