Stay Secure with the Latest Linux Advisories

security advisorysecurity updateremote execution

Mageia 7 MGASA-2021-0141: Risks of Ksh Remote Execution Vulnerability

A flaw was found in the way ksh evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables could allow them to exploit this issue remotely (CVE-2019-14868). . MGASA-2021-0141 - Updated ksh packages fix security vulnerability Publication date: 17 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0141.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-14868 A flaw was found in the way ksh evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables could allow them to exploit this issue remotely (CVE-2019-14868). References: - https://bugs.mageia.org/show_bug.cgi?id=26213 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/N4R57SLEOTTXFWOLPTVVS2AOZ35FZEJR/ - https://www.cve.org/CVERecord?id=CVE-2019-14868 SRPMS: - 7/core/ksh-2020.0.0.81.git8052490-0.1.1.mga7 . Security notice for Mageia updating bash package to fix vulnerabilities enabling remote exploitation.. ksh Security Fix,Mageia Updates,Remote Command Execution,Ksh Exploit,Environment Variable Attack. . Severity: Critical. LinuxSecurity.com Team

Mar 17, 2021 •Critical Mageia