Is CVE-2019-18276 in the CISA KEV catalog?

No. CVE-2019-18276 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2019-18276?

CVE-2019-18276 has a CVSS v3 base score of 7.8 (HIGH).

What is the EPSS score for CVE-2019-18276?

CVE-2019-18276 has an EPSS score of 2.61% (83th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2019-18276?

Upgrade bash on debian 11 to 5.1~rc1-2 or later. Fixes are available for 2 affected products.

CVE & CISA-KEV Catalog

CVE-2019-18276

HIGHEPSS 83th pctl

7.8

CVSS v3

NVD

Description

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.

CWE-273

How to fix

Remediation Available

bashDebian

Fixed in:5.1~rc1-2CVE-2019-18276

bashUbuntu

Fixed in:4.3-7ubuntu1.8+esm2USN-5380-1

Fixed in:4.3-14ubuntu1.4+esm1USN-5380-1

Fixed in:4.4.18-2ubuntu1.3USN-5380-1

Fixed in:5.0-6ubuntu1.2USN-5380-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

2.61%probability of exploitation in 30 days

83rdpercentile

Elevated risk: more likely to be exploited than 83% of all known CVEs.

References

Patch2

Exploit2

Third-Party Advisory2

Other references1

lists.apache.org

Embed a live status badge for CVE-2019-18276

Markdown

[![CVE-2019-18276](https://tridentstack.com/cve/badge/CVE-2019-18276.svg)](https://tridentstack.com/cve/CVE-2019-18276)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-18276"><img src="https://tridentstack.com/cve/badge/CVE-2019-18276.svg" alt="CVE-2019-18276"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-06-09.