CVE-2022-3715
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform.
Published Jan 5, 2023 · updated Oct 14, 2026 · gnu bash
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 5, 2023 · NIST NVD
Detected
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
Affected
- cpe gnu/bashversion unspecified
- cpe redhat/enterprise linux9.0
Sources
- CVE.orgVulnerability recordCVE-2022-3715
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-3715
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2022-3715
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
nvd.nist.gov