Heap Buffer Overflow

2022-12-0423:21:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

bash

heap buffer overflow

valid_parameter_transform

subst.c

system crash

malicious html page

0.0004 Low

EPSS

Percentile

9.2%

JSON

bash is vulnerable to a heap buffer overflow. The vulnerability exists in valid_parameter_transform function of subst.c which allows an attacker to crash the system through potentially exploit heap corruption via a malicious HTML page.

CPENameOperatorVersion
bash:sideq5.1-3+b1
bash:sideq5.1-2+b1
bash:sideq5.1~rc3-1
bash:sideq5.1-3+b1
bash:sideq5.1-2+b1
bash:sideq5.1~rc3-1
basheq4.1.2__15.el6_5.1
basheq4.1.2__15.el6_4.1
basheq4.1.2__14.el6_4.sjis.1
basheq4.1.2__8.el6

Name	Operator	Version
bash:sid	eq	5.1-3+b1
bash:sid	eq	5.1-2+b1
bash:sid	eq	5.1~rc3-1
bash:sid	eq	5.1-3+b1
bash:sid	eq	5.1-2+b1
bash:sid	eq	5.1~rc3-1
bash	eq	4.1.2__15.el6_5.1
bash	eq	4.1.2__15.el6_4.1
bash	eq	4.1.2__14.el6_4.sjis.1
bash	eq	4.1.2__8.el6