Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 7 MGASA-2021-0141: Risks of Ksh Remote Execution Vulnerability

mageia
Calendar Grey March 17, 2021
Dist Mageia Esm H88
Security notice for Mageia updating bash package to fix vulnerabilities enabling remote exploitation.
A flaw was found in the way ksh evaluates certain environment variables

Summary

A flaw was found in the way ksh evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables could allow them to exploit this issue remotely (CVE-2019-14868).

References

- https://bugs.mageia.org/show_bug.cgi?id=26213

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/N4R57SLEOTTXFWOLPTVVS2AOZ35FZEJR/

- https://www.cve.org/CVERecord?id=CVE-2019-14868

Topics%20covered

Topics Covered

security advisory security update remote execution Mageia ksh exploit

Resolution

SRPMS

- 7/core/ksh-2020.0.0.81.git8052490-0.1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 17 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0141.html
Type: security
CVE: CVE-2019-14868

Topics%20covered

Topics Covered

security advisory security update remote execution Mageia ksh exploit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here