The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2756-1 advisory.

    - CVE-2019-14868: Fixed code injection due to environment variables on startup interpreted as arithmetic     expression (bsc#1160796)

    Other fixes:
    - do not use posix_spawn as it lacks proper job handling (bsc#1224057)
    - fix segfault in variable substitution (bsc#1129288)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0559 advisory.

  - ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0568 advisory.

    KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the     Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell     complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

    Security Fix(es):

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0431 advisory.

    KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the     Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell     complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

    Security Fix(es):

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-169:04 advisory.

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5351 advisory.

    KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the     Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell     complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

    Security Fix(es):

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An     attacker could use this flaw to override or bypass environment restrictions to execute shell commands.
    Services and applications that allow remote unauthenticated attackers to provide one of those environment     variables could allow them to exploit this issue remotely. (CVE-2019-14868)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the version of the ksh package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In ksh version 20120801, a flaw was found in the way it     evaluates certain environment variables. An attacker     could use this flaw to override or bypass environment     restrictions to execute shell commands. Services and     applications that allow remote unauthenticated     attackers to provide one of those environment variables     could allow them to exploit this issue     remotely.(CVE-2019-14868)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0515 advisory.

  - In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An     attacker could use this flaw to override or bypass environment restrictions to execute shell commands.
    Services and applications that allow remote unauthenticated attackers to provide one of those environment     variables could allow them to exploit this issue remotely. (CVE-2019-14868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Do not evaluate arithmetic expressions from environment variables at startup

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4474:01 advisory.

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5352 advisory.

    KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the     Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell     complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

    Security Fix(es):

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1332 advisory.

    KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the     Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell     complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

    Security Fix(es):

    * ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
205000	SUSE SLES12 Security Update : ksh (SUSE-SU-2024:2756-1)	Nessus	SuSE Local Security Checks	8/6/2024	8/6/2024	high
145895	CentOS 8 : ksh (CESA-2020:0559)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	high
134025	RHEL 7 : ksh (RHSA-2020:0568)	Nessus	Red Hat Local Security Checks	2/25/2020	11/7/2024	high
133516	RHEL 8 : ksh (RHSA-2020:0431)	Nessus	Red Hat Local Security Checks	2/6/2020	11/7/2024	high
294700	MiracleLinux 8 : ksh-20120801-253.el8 (AXSA:2020-169:04)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
143604	RHEL 7 : ksh (RHSA-2020:5351)	Nessus	Red Hat Local Security Checks	12/9/2020	11/7/2024	high
259474	Linux Distros Unpatched Vulnerability : CVE-2019-14868	Nessus	Misc.	8/30/2025	7/12/2026	high
140875	EulerOS 2.0 SP3 : ksh (EulerOS-SA-2020-2108)	Nessus	Huawei Local Security Checks	9/28/2020	2/19/2024	high
133767	CentOS 6 : ksh (RHSA-2020:0515)	Nessus	CentOS Local Security Checks	2/19/2020	10/9/2024	high
133739	Fedora 30 : 1:ksh (2020-a0f0eb8500)	Nessus	Fedora Local Security Checks	2/18/2020	3/27/2024	high
294156	MiracleLinux 4 : ksh-20120801-38.AXS4 (AXSA:2020-4474:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
143606	RHEL 7 : ksh (RHSA-2020:5352)	Nessus	Red Hat Local Security Checks	12/9/2020	11/7/2024	high
135234	RHEL 7 : ksh (RHSA-2020:1332)	Nessus	Red Hat Local Security Checks	4/6/2020	11/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high