View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-5932 severity moderate: SUSE including 14 source package names (bash, bash-devel, …), 241 product×package rows across 53 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (53 product lines)): Known Not Affected 241.
The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.