CVE-2022-3715 @ Helios

"CVE-2022-3715"
"bash-5.1-2+deb11u1"
"bash-completion-1:2.11-2"
"Am I vulnerable?"

Status

not_applicable

Priority

1.17

Match score

4.0

Risk

MemCorrupt priv:user

CVSS

7.8 HIGH

Reason

cpe: bash; pkgs: bash; version: in-range: bash-5.1-2+deb11u1; risk:memory_corruption

Created

2026-10-20T19:09:10Z

Updated

2026-10-21T16:44:21Z

Closed

2026-10-20T19:42:28Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

Package	Commands
bash-5.1-2+deb11u1
bash-completion-1:2.11-2

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: bash

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

Debian GNU/Linux 11 (bullseye) (11) · debian

Arch

aarch64

kernel_release

uname -r → 6.1.21-v8+

kernel_version

uname -v → #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
Bullseye	not_applicable	1.17	2026-10-21T16:44:21Z	Open

Description

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.

Determination

Trigger: Local. A user or process must evaluate a specially crafted parameter transformation (e.g., via ${var@transform}). It is not a network listener and does not grant remote code execution by itself. On a normal server the only way to hit it is if untrusted input is fed into bash parameter expansions that use the affected transforms.

Update status

Add note only

Mitigation log

2026-10-20T19:42:28Z — not_applicable

Trigger: Local. A user or process must evaluate a specially crafted parameter transformation (e.g., via ${var@transform}). It is not a network listener and does not grant remote code execution by itself. On a normal server the only way to hit it is if untrusted input is fed into bash parameter expansions that use the affected transforms.

References

NVD: CVE-2022-3715