Bash
Vendor:
First CVE: Sep 13, 1996 · Active for 29 years
18
Total CVEs
More Total CVEs than 93% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
16.7%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Bash over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 13, 1996
29 years ago
Most Recent CVE
Jan 5, 2023
1,296 days ago
CVE Severity & Scoring
Bash18 CVEs
22%
61%
11%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local7 (38.9%)
Network4 (22.2%)
Unknown7 (38.9%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (55.6%)
High1 (5.6%)
Unknown7 (38.9%)
User Interaction
None10 (55.6%)
Unknown7 (38.9%)
Required1 (5.6%)
Privileges Required
Low7 (38.9%)
High0 (0.0%)
None4 (22.2%)
Unknown7 (38.9%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-6278HIGH GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via | Sep 30, 2014 | 8.8 | 98 | YES | YES |
CVE-2014-7169CRITICAL GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri | Sep 25, 2014 | 9.8 | 98 | YES | YES |
CVE-2014-7186HIGH The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) | Sep 28, 2014 | 10.0 | 77 | NO | YES |
CVE-2014-6277HIGH GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or caus | Sep 27, 2014 | 10.0 | 77 | NO | YES |
CVE-2014-7187HIGH Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and | Sep 28, 2014 | 10.0 | 71 | NO | YES |
CVE-2016-0634HIGH The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine. | Aug 28, 2017 | 7.5 | 28 | NO | NO |
CVE-2022-3715HIGH A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems. | Jan 5, 2023 | 7.8 | 26 | NO | NO |
CVE-2019-18276HIGH An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop | Nov 28, 2019 | 7.8 | 26 | NO | NO |
CVE-2012-6711HIGH A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through t | Jun 18, 2019 | 7.8 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
3 CVEs
16.7% of CVEs· 98th percentile
Metasploit
2 CVEs
11.1% of CVEs· 97th percentile
Nuclei
1 CVE
5.6% of CVEs· 97th percentile
ExploitDB
8 CVEs
44.4% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Bash
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.0 | 1 | 7.8 | 2.6% | 0 | 0 |
| 4.4 | 3 | 6.2 | 0.4% | 0 | 0 |
| 4.3 | 5 | 9.3 | 58.6% | 1 | 4 |
| 4.2 | 5 | 8.7 | 57.4% | 1 | 4 |
| 4.1 | 4 | 9.7 | 71.7% | 1 | 4 |
| 4.0 | 5 | 8.9 | 63.8% | 1 | 5 |
| 3.2.48 | 5 | 8.2 | 57.5% | 1 | 5 |
| 3.2 | 5 | 8.2 | 57.5% | 1 | 5 |
| 3.1 | 4 | 9.7 | 71.7% | 1 | 4 |
| 3.0.16 | 4 | 9.7 | 71.7% | 1 | 4 |
| 3.0 | 5 | 8.2 | 57.5% | 1 | 5 |
| 2.05 | 6 | 8.5 | 57.5% | 1 | 6 |
| 2.04 | 4 | 9.7 | 71.7% | 1 | 4 |
| 2.03 | 5 | 8.7 | 57.5% | 1 | 5 |
| 2.02.1 | 5 | 8.7 | 57.5% | 1 | 5 |
| 2.02 | 5 | 8.7 | 57.5% | 1 | 5 |
| 2.01.1 | 5 | 8.7 | 57.5% | 1 | 5 |
| 2.01 | 5 | 8.7 | 57.5% | 1 | 5 |
| 2.0 | 5 | 8.7 | 57.5% | 1 | 5 |
| 1.14.7 | 5 | 8.7 | 57.5% | 1 | 5 |