ksh vulnerabilities and fixes

Recent CVEs affecting ksh, with upgrade or downgrade steps. 1 tracked.

ksh has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-04-02. Highest priority: CVE-2019-14868 (score 49/100).

• CVE-2019-14868 HIGH 7.4 DOWNGRADE MITIGATE In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables

FAQ

How do I fix ksh vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ksh being exploited right now?

None of the tracked ksh CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ksh CVE should I patch first?

CVE-2019-14868 currently ranks highest (49/100): In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables.

← Back to latest CVEs