CVE-2019-18276
HighAdvisory
Published 28 Nov 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.026
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 384
- of 17,781 indexed, latest versions
- Container images
- 322
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: bash security and bug fix update
Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bashdeb | 4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more | 4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2 | 299 |
| bashrpm | 4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_2 | 0:4.4.19-14.el8 | 23 |
- OSV records
- RHSA-2021:1679UBUNTU-CVE-2019-18276
- Also known as
- USN-5380-1
Charts affected
384 by stars
Container images carrying it
322 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 9b6105be7ad0 | bash | 5.0-6ubuntu1.2 | 2 |
| ghcr.io/ | 4ee0764310e7 | bash | 4.4.18-2ubuntu1.3 | 2 |
| a10networks/ | 8dc58d434d71 | bash | 4.4.18-2ubuntu1.3 | 1 |
| adwerx/ | 840d2b078682 | bash | 5.0-6ubuntu1.2 | 1 |
| airsonicadvanced/ | f7cbafac2806 | bash | 5.0-6ubuntu1.2 | 1 |
| anchore/ | ed9b3badd17c | bash | 0:4.4.19-14.el8 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | bash | 5.0-6ubuntu1.2 | 1 |
| apachepulsar/ | d056c89b7131 | bash | 5.0-6ubuntu1.2 | 1 |
| apachepulsar/ | d538416d5afe | bash | 5.0-6ubuntu1.2 | 1 |
| apache/ | b4ec8c18d079 | bash | 5.0-6ubuntu1.2 | 1 |
| apache/ | 80530f0308a5 | bash | 5.0-6ubuntu1.2 | 1 |
| arilot/ | 27a4f7e0f9f1 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| bbernhard/ | 549ad08d7e14 | bash | 5.0-6ubuntu1.2 | 1 |
| blakeblackshear/ | ae269270ad9e | bash | 5.0-6ubuntu1.2 | 1 |
| browserless/ | c81ae5585b47 | bash | 5.0-6ubuntu1.2 | 1 |
| bsgrigorov/ | 45ab095f09c8 | bash | 0:4.4.19-14.el8 | 1 |
| chetangautamm/ | b4b94155ff5a | bash | 4.3-7ubuntu1.8+esm2 | 1 |
| chetangautamm/ | e7f7049e1544 | bash | 5.0-6ubuntu1.2 | 1 |
| cheyang/ | 46cc34755493 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| citizenstig/ | b81c818ccb86 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| cloudve/ | af56e77ca587 | bash | 4.4.18-2ubuntu1.3 | 1 |
| cloudve/ | d79c1c5881c0 | bash | 4.4.18-2ubuntu1.3 | 1 |
| confluentinc/ | f2975d507a2a | bash | 0:4.4.19-14.el8 | 1 |
| confluentinc/ | 8f1544df1f48 | bash | 0:4.4.19-14.el8 | 1 |
| confluentinc/ | 4bc70a83ca6f | bash | 0:4.4.19-14.el8 | 1 |
| confluentinc/ | b0b7aa26254a | bash | 0:4.4.19-14.el8 | 1 |
| confluentinc/ | ee403d5b9090 | bash | 0:4.4.19-14.el8 | 1 |
| confluentinc/ | b651d4b6185a | bash | 0:4.4.19-14.el8 | 1 |
| confluentinc/ | 78c190f4472c | bash | 0:4.4.19-14.el8 | 1 |
| countly/ | e3c238248f99 | bash | 5.0-6ubuntu1.2 | 1 |
| cradlepoint/ | 8f5720b0cd03 | bash | 4.4.18-2ubuntu1.3 | 1 |
| cribl/ | 762747cb6796 | bash | 4.4.18-2ubuntu1.3 | 1 |
| csiplugin/ | 1fa83d45417f | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| ctron/ | 8fdea8f76499 | bash | 0:4.4.19-14.el8 | 1 |
| daedalusproject/ | 6f72b5119eda | bash | 5.0-6ubuntu1.2 | 1 |
| daskdev/ | 052630f5ca04 | bash | 4.4.18-2ubuntu1.3 | 1 |
| datalust/ | 9c731bb207a6 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| dellcloud/ | 02fc234353a9 | bash | 5.0-6ubuntu1.2 | 1 |
| dellcloud/ | 4d2eb25b9225 | bash | 5.0-6ubuntu1.2 | 1 |
| dgraziotin/ | 38f2de42bed0 | bash | 5.0-6ubuntu1.2 | 1 |
| dniel/ | 45a667852f2a | bash | 4.4.18-2ubuntu1.3 | 1 |
| elastictranscoder/ | 963ab3858c6b | bash | 4.4.18-2ubuntu1.3 | 1 |
| elastictranscoder/ | 26208b8c2359 | bash | 4.4.18-2ubuntu1.3 | 1 |
| elastictranscoder/ | b4a0327029e6 | bash | 4.4.18-2ubuntu1.3 | 1 |
| elastictranscoder/ | 5b75d19e2733 | bash | 4.4.18-2ubuntu1.3 | 1 |
| empathyco/ | 03e724e41eeb | bash | 5.0-6ubuntu1.2 | 1 |
| engrmth/ | 6d8464e6f0e8 | bash | 5.0-6ubuntu1.2 | 1 |
| enix/ | f963da81ecf7 | bash | 4.4.18-2ubuntu1.3 | 1 |
| envoyproxy/ | e8b37c1d7578 | bash | 4.4.18-2ubuntu1.3 | 1 |
| ethanbergstrom/ | 345c2a46c103 | bash | 5.0-6ubuntu1.2 | 1 |