bash (SUSE:Linux Enterprise Workstation Extension 12 SP1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Workstation Extension 12 SP1 package bash, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2014-6277 — CVSS 10.0 (critical): GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote…
• CVE-2014-6278 — CVSS 8.8 (high) — actively exploited: GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote…
• CVE-2016-7543 — CVSS 8.4 (high): Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
• CVE-2016-0634 — CVSS 7.5 (high): The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters…