PatchTheCVEosh vulnerabilities and fixes
Recent CVEs affecting osh, with upgrade or downgrade steps. 3 tracked.
osh has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2005-12-11. Highest priority: CVE-2005-3533 (score 52/100).
- CVE-2005-3533 HIGH 7.2 UPGRADE Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working d
- CVE-2005-3346 HIGH 7.2 DOWNGRADE Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to in
- CVE-2003-0452 MEDIUM 4.6 UPGRADE Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restriction
FAQ
How do I fix osh vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is osh being exploited right now?
None of the tracked osh CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which osh CVE should I patch first?
CVE-2005-3533 currently ranks highest (52/100): Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working d.