CVE-2019-9924
HighAdvisory
Published 22 Mar 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.004
- 33rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 79
- of 17,781 indexed, latest versions
- Container images
- 78
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: bash security update
Carried by container images the latest versions of 79 of 17,781 indexed charts deploy, on 78 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bashdeb | 4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+1 more | 4.3-7ubuntu1.8+esm1, 4.3-14ubuntu1.4 | 62 |
| bashrpm | 4.2.46-31.el7, 4.2.46-33.el7 | 0:4.2.46-34.el7 | 16 |
- OSV records
- RHSA-2020:1113UBUNTU-CVE-2019-9924
- Also known as
- RHSA-2020:3474, RHSA-2020:3592, USN-4058-1, USN-4058-2
Charts affected
79 by stars
Container images carrying it
78 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| lightbend/ | b0c9894ac8dd | bash | 4.3-14ubuntu1.4 | 1 |
| muluder/ | 43b597a93da7 | bash | 4.3-14ubuntu1.4 | 1 |
| ngick8stesting/ | 8dd6dea45be4 | bash | 4.3-14ubuntu1.4 | 1 |
| omecproject/ | 5715e5648aa0 | bash | 4.3-14ubuntu1.4 | 1 |
| omecproject/ | d109a8e57e71 | bash | 4.3-14ubuntu1.4 | 1 |
| oomk8s/ | 3adf3d21ad3b | bash | 4.3-14ubuntu1.4 | 1 |
| openliberty/ | 6f9278b8b2cc | bash | 0:4.2.46-34.el7 | 1 |
| openliberty/ | c649524bc428 | bash | 0:4.2.46-34.el7 | 1 |
| opsmx11/ | 5c50ca123d88 | bash | 4.3-7ubuntu1.8+esm1 | 1 |
| plexinc/ | b598abb134ad | bash | 4.3-14ubuntu1.4 | 1 |
| pposkrobko/ | eaf260341dba | bash | 4.3-14ubuntu1.4 | 1 |
| rancher/ | e66f32d19eb9 | bash | 4.3-14ubuntu1.4 | 1 |
| resouer/ | e2f198b49ba7 | bash | 4.3-7ubuntu1.8+esm1 | 1 |
| rundeck/ | b13e8059ad72 | bash | 4.3-14ubuntu1.4 | 1 |
| seldonio/ | 1d0da98a2d76 | bash | 4.3-14ubuntu1.4 | 1 |
| tensorflow/ | 1e3172090703 | bash | 4.3-14ubuntu1.4 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | bash | 4.3-14ubuntu1.4 | 1 |
| tpdock/ | 3da600c95a49 | bash | 4.3-14ubuntu1.4 | 1 |
| voltha/ | c4e41e92f046 | bash | 4.3-14ubuntu1.4 | 1 |
| voltha/ | 59ab2a00f712 | bash | 4.3-7ubuntu1.8+esm1 | 1 |
| voltha/ | 37f80524c207 | bash | 4.3-14ubuntu1.4 | 1 |
| voltha/ | 9ee8c1f4428c | bash | 4.3-14ubuntu1.4 | 1 |
| voltha/ | 655c3048a602 | bash | 4.3-14ubuntu1.4 | 1 |
| voltha/ | ff596b62de59 | bash | 4.3-14ubuntu1.4 | 1 |
| gcr.io/ | 10f4dbc8eeeb | bash | 4.3-14ubuntu1.4 | 1 |
| gcr.io/ | cb5c1bddd1b5 | bash | 4.3-14ubuntu1.4 | 1 |
| gcr.io/ | 5ea7b7f3632a | bash | 4.3-14ubuntu1.4 | 1 |
| gcr.io/ | 8f9ff98fdbef | bash | 4.3-14ubuntu1.4 | 1 |