VDB
ALINUX2-SA-2020%3A0041
ALINUX2-SA-2020%3A0041
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-9924: rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
Risk Scores
CVSS 3.0
5.300000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | bash |
Timeline
- Apr 1, 2020 CVE Published
- Apr 1, 2020 CVE Updated