Korean
<< Back
VID 14239
Severity 40
Port 22
Protocol TCP
Class LSC
Detailed Description The remote system does not apply USN-4058-1 which is bash security update. The system which does not apply the update is affected by the following vulnerability:

- It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.

Note: This check solely relied on the bash DPKG version of the remote system to assess this vulnerability, so this might be a false positive.

* References:
https://usn.ubuntu.com/4058-1/

* Platforms Affected:
Ubuntu 16.04 LTS
Recommendation For a command line interface, use the following command to update the operating system:
# apt-get upgrade
Related URL CVE-2019-9924 (CVE)
Related URL (SecurityFocus)
Related URL (ISS)