PatchTheCVEksh project vulnerabilities
Recent CVEs affecting ksh project products. 1 tracked.
ksh project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-04-02. Highest priority: CVE-2019-14868 (score 49/100).
- CVE-2019-14868 HIGH 7.4 DOWNGRADE MITIGATE In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables
FAQ
How do I fix ksh project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ksh project being exploited right now?
None of the tracked ksh project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ksh project CVE should I patch first?
CVE-2019-14868 currently ranks highest (49/100): In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables.