CVE-2019-18276
HighAdvisory
Published 28 Nov 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.026
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 384
- of 17,781 indexed, latest versions
- Container images
- 322
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: bash security and bug fix update
Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bashdeb | 4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more | 4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2 | 299 |
| bashrpm | 4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_2 | 0:4.4.19-14.el8 | 23 |
- OSV records
- RHSA-2021:1679UBUNTU-CVE-2019-18276
- Also known as
- USN-5380-1
Charts affected
384 by stars
Container images carrying it
322 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dellcloud/ | 6ba7b22caacd | bash | 5.0-6ubuntu1.2 | 79 |
| flyway/ | 22d97ceb0c47 | bash | 4.4.18-2ubuntu1.3 | 79 |
| oomk8s/ | 875814cc853d | bash | 4.3-14ubuntu1.4+esm1 | 11 |
| library/ | 8e70544b6c76 | bash | 5.0-6ubuntu1.2 | 10 |
| oomk8s/ | 7daa08b81954 | bash | 4.3-14ubuntu1.4+esm1 | 6 |
| hyperledger/ | 4ce6f43ded2e | bash | 4.3-14ubuntu1.4+esm1 | 4 |
| hyperledger/ | f6c724592abf | bash | 4.3-14ubuntu1.4+esm1 | 4 |
| library/ | 628741415fc9 | bash | 4.4.18-2ubuntu1.3 | 4 |
| library/ | 6efa05203990 | bash | 4.4.18-2ubuntu1.3 | 4 |
| oscarsotosanchez/ | 911ec961d10b | bash | 4.4.18-2ubuntu1.3 | 4 |
| cloudve/ | 4a3d7fae90bb | bash | 5.0-6ubuntu1.2 | 3 |
| dgraph/ | 3b55ea83fffe | bash | 5.0-6ubuntu1.2 | 3 |
| minio/ | bd11edda91f3 | bash | 0:4.4.19-14.el8 | 3 |
| omecproject/ | d59ccb138ffb | bash | 4.3-14ubuntu1.4+esm1 | 3 |
| selenium/ | 02f251d48d5f | bash | 5.0-6ubuntu1.2 | 3 |
| xenondb/ | 0e26872a2b67 | bash | 5.0-6ubuntu1.2 | 3 |
| quay.io/ | 39f2c6e0af38 | bash | 5.0-6ubuntu1.2 | 3 |
| quay.io/ | 4c3b91bebd3d | bash | 4.3-14ubuntu1.4+esm1 | 3 |
| freeradius/ | 21c8bfa904d8 | bash | 4.4.18-2ubuntu1.3 | 2 |
| geoservercloud/ | 756559ee788a | bash | 5.0-6ubuntu1.2 | 2 |
| geoservercloud/ | 99540eef78ad | bash | 5.0-6ubuntu1.2 | 2 |
| geoservercloud/ | 5c254c53a357 | bash | 5.0-6ubuntu1.2 | 2 |
| geoservercloud/ | c687b1cbc891 | bash | 5.0-6ubuntu1.2 | 2 |
| geoservercloud/ | 5288f320cf36 | bash | 5.0-6ubuntu1.2 | 2 |
| geoservercloud/ | a30a60ac6cd0 | bash | 5.0-6ubuntu1.2 | 2 |
| honestica/ | a393242fb939 | bash | 5.0-6ubuntu1.2 | 2 |
| hookiesolutions/ | 0629694246ba | bash | 5.0-6ubuntu1.2 | 2 |
| interlayhq/ | c3e311de67da | bash | 5.0-6ubuntu1.2 | 2 |
| iomesh/ | f03148764f38 | bash | 5.0-6ubuntu1.2 | 2 |
| istio/ | 40e8aba77c1b | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| istio/ | ee156b8aefd6 | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| istio/ | e86d247b7ac2 | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| istio/ | eab80bcd2132 | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| istio/ | 1e37fca43550 | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| istio/ | e454cab754cf | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| istio/ | dbb7726d1bf0 | bash | 4.4.18-2ubuntu1.3 | 2 |
| istio/ | a78b7a165744 | bash | 4.4.18-2ubuntu1.3 | 2 |
| library/ | 5aa8400b4b3b | bash | 4.4.18-2ubuntu1.3 | 2 |
| library/ | 5e6ac15bf6a5 | bash | 5.0-6ubuntu1.2 | 2 |
| library/ | 58b25d51baa1 | bash | 4.4.18-2ubuntu1.3 | 2 |
| library/ | 1f1a2d56de1d | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| lightstep/ | 11c5569aaf3b | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| mesosphere/ | 073db43d0b8b | bash | 5.0-6ubuntu1.2 | 2 |
| ngick8stesting/ | 1e764eab77b4 | bash | 4.4.18-2ubuntu1.3 | 2 |
| obsidiandynamics/ | 5337c9e0e2de | bash | 5.0-6ubuntu1.2 | 2 |
| omecproject/ | cfdb566dd949 | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| wurstmeister/ | 7a7fd44a7210 | bash | 4.3-7ubuntu1.8+esm2 | 2 |
| gcr.io/ | fbe12aa24de6 | bash | 4.3-14ubuntu1.4+esm1 | 2 |
| ghcr.io/ | f34f98405c10 | bash | 5.0-6ubuntu1.2 | 2 |
| ghcr.io/ | 103fbcec2314 | bash | 5.0-6ubuntu1.2 | 2 |