bash (SUSE:Linux Enterprise Server for SAP Applications 12 SP1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP1 package bash, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2014-6277 — CVSS 10.0 (critical): GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote…
• CVE-2014-6278 — CVSS 8.8 (high) — actively exploited: GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote…
• CVE-2016-7543 — CVSS 8.4 (high): Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
• CVE-2019-9924 — CVSS 7.8 (high): rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with…
• CVE-2016-0634 — CVSS 7.5 (high): The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters…
• CVE-2012-6711 — CVSS 7.0 (high): A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE…