Fishshell

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-49284 Dec 05, 00:15 MEDIUM POC PATCH This Month

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. Public exploit code available.

RCE Denial Of Service Information Disclosure Apple Fish +1

NVD GitHub

CVSS 3.1

6.6

EPSS

0.5%

CVE-2022-20001 Mar 14, 19:15 HIGH PATCH This Week

fish is a command line shell. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Debian Debian Linux Fedora Fish +2

NVD GitHub

CVSS 3.1

7.8

EPSS

1.4%

CVE-2014-2905 May 02, 14:55 MEDIUM This Month

fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Fish Fishshell

NVD GitHub VulDB

CVSS 2.0

6.9

EPSS

0.0%

CVE-2023-49284

EPSS 0% CVSS 6.6

MEDIUM POC PATCH This Month

RCE Denial Of Service Information Disclosure +3

NVD GitHub

CVE-2022-20001

EPSS 1% CVSS 7.8

HIGH PATCH This Week

fish is a command line shell. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Debian Debian Linux +4

NVD GitHub

CVE-2014-2905

EPSS 0% CVSS 6.9

MEDIUM This Month

Privilege Escalation Fish Fishshell

NVD GitHub VulDB