CVE-2019-18276
HighAdvisory
Published 28 Nov 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.026
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 384
- of 17,781 indexed, latest versions
- Container images
- 322
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: bash security and bug fix update
Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bashdeb | 4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more | 4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2 | 299 |
| bashrpm | 4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_2 | 0:4.4.19-14.el8 | 23 |
- OSV records
- RHSA-2021:1679UBUNTU-CVE-2019-18276
- Also known as
- USN-5380-1
Charts affected
384 by stars
Container images carrying it
322 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| jmferrer/ | 030f68ec6998 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | bash | 5.0-6ubuntu1.2 | 1 |
| jupyterhub/ | e4770285aaf7 | bash | 5.0-6ubuntu1.2 | 1 |
| jupyterhub/ | e3e6f3051df8 | bash | 5.0-6ubuntu1.2 | 1 |
| kennethreitz/ | 599fe5e50731 | bash | 4.4.18-2ubuntu1.3 | 1 |
| kubeoperator/ | be8f0d624640 | bash | 4.4.18-2ubuntu1.3 | 1 |
| kubesphere/ | 6d93129beb32 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| kudobuilder/ | 69072d979708 | bash | 4.4.18-2ubuntu1.3 | 1 |
| library/ | b095ff3248c6 | bash | 5.0-6ubuntu1.2 | 1 |
| library/ | 332c6d416808 | bash | 5.0-6ubuntu1.2 | 1 |
| library/ | e2e2031c15be | bash | 5.0-6ubuntu1.2 | 1 |
| library/ | 490f01279be1 | bash | 5.0-6ubuntu1.2 | 1 |
| library/ | 146c1fd999a6 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| library/ | 3d0e6df9fd5b | bash | 4.4.18-2ubuntu1.3 | 1 |
| library/ | 6ca49afbcb2b | bash | 4.4.18-2ubuntu1.3 | 1 |
| library/ | b6dd45cc35b3 | bash | 4.4.18-2ubuntu1.3 | 1 |
| lightbend/ | b0c9894ac8dd | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| linuxserver/ | a847b5b2d860 | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | 938810eca3d3 | bash | 5.0-6ubuntu1.2 | 1 |
| linuxserver/ | 45c5fe102ff3 | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | b801bbcf6386 | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | 0ac871624394 | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | 2ce561a95e7b | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | 2427dde159a2 | bash | 5.0-6ubuntu1.2 | 1 |
| linuxserver/ | f93d2560e233 | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | 2fbb21fb4903 | bash | 4.4.18-2ubuntu1.3 | 1 |
| linuxserver/ | 4a13ced2326c | bash | 5.0-6ubuntu1.2 | 1 |
| litmuschaos/ | 99961210d467 | bash | 4.4.18-2ubuntu1.3 | 1 |
| longhornio/ | dca34321452c | bash | 5.0-6ubuntu1.2 | 1 |
| longhornio/ | ede61fe2a472 | bash | 4.4.18-2ubuntu1.3 | 1 |
| lsstsqre/ | b75bf8aaafa4 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | fcb9fb54a9fd | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 147854a3c916 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 79428add7f38 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 53decadc102d | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 17fbce1a8bc6 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | ea8110886d38 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | e2e5abe27abc | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | b9a23345eabd | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 7a9ffdc2178a | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | dbbaf5462ad6 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 8b74f9d3ba09 | bash | 5.0-6ubuntu1.2 | 1 |
| lumenvox/ | 14170ad34903 | bash | 5.0-6ubuntu1.2 | 1 |
| minio/ | 2a374c124d44 | bash | 0:4.4.19-14.el8 | 1 |
| muluder/ | 43b597a93da7 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| ngick8stesting/ | 8dd6dea45be4 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| nvidia/ | 91b20b66d1cd | bash | 5.0-6ubuntu1.2 | 1 |
| nvidia/ | 964847cc3fd8 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| omecproject/ | 638671ef4842 | bash | 4.3-14ubuntu1.4+esm1 | 1 |
| omecproject/ | 28a90cc26716 | bash | 5.0-6ubuntu1.2 | 1 |