CVE:CVE-2019-18276
CNNVD:CNNVD-201911-1471
Bash是美国布莱恩-福克斯（Brian J. Fox）个人开发者的一款为GNU计划而编写的、运行于类Unix操作系统中的Shell（命令语言解释器）。它能够从标准输入设备或文件中读取、执行命令。
Bash 5.0 patch 11及之前版本中的shell.c文件的disable_priv_mode存在安全漏洞。攻击者可利用该漏洞获取权限。
solution:Upgrade gnu bash to a higher version than 5.0,5.0:beta1,5.0:beta2,5.0:patch1,5.0:patch10,5.0:patch11,5.0:patch2,5.0:patch3,5.0:patch4,5.0:patch5,5.0:patch6,5.0:patch7,5.0:patch8,5.0:patch9,5.0:rc1,and avoid the version (,5.0],5.0:beta1,5.0:beta2,5.0:patch1,5.0:patch10,5.0:patch11,5.0:patch2,5.0:patch3,5.0:patch4,5.0:patch5,5.0:patch6,5.0:patch7,5.0:patch8,5.0:patch9,5.0:rc1; Upgrade netapp hci_management_node to a higher version than -; netapp oncommand_unified_manager avoid the version [9.5,); Upgrade netapp solidfire to a higher version than -; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0