CVE Feed

    Dashboard / CVE / CVE-2014-7187

    CVE-2014-7187

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.

    Published:Sep 26, 2014
    Last Modified:Apr 12, 2025
    EPS:Sep 28, 2014
    EPSS Score:0.90099
    CVSS Score:10

    Affected Products

    Vendor
    Gnu
    Product
    Bash
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Els
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Mission Critical
    Vendor
    Redhat
    Product
    Rhel Sjis
    Vendor
    Redhat
    Product
    Rhev Manager

    Exploits

    http://openwall.com/lists/oss-security/2014/09/25/32http://openwall.com/lists/oss-security/2014/09/25/32https://www.exploit-db.com/exploits/36933https://www.exploit-db.com/exploits/34860

    Related CVEs

    CVE-2022-3715 (CVSS 7.8) — A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. Thi…
    CVE-2019-18276 (CVSS 7.8) — An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash …
    CVE-2012-6711 (CVSS 7) — A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current …
    CVE-2019-9924 (CVSS 7.8) — rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user…
    CVE-2017-5932 (CVSS 7.8) — The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename start…
    CVE-2016-9401 (CVSS 5.5) — popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted a…
    CVE-2016-7543 (CVSS 8.4) — Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS an…
    CVE-2016-0634 (CVSS 7.5) — The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary …
    CVE-2014-6278 (CVSS 8.8) — GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment vari…
    CVE-2014-6277 (CVSS 10) — GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment vari…

    References

    http://jvn.jp/en/jp/JVN55667175/index.html
    http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126
    http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
    http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html
    http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html
    http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
    http://marc.info/?l=bugtraq&m=141330468527613&w=2
    http://marc.info/?l=bugtraq&m=141345648114150&w=2
    http://marc.info/?l=bugtraq&m=141383026420882&w=2
    http://marc.info/?l=bugtraq&m=141383081521087&w=2
    http://marc.info/?l=bugtraq&m=141383138121313&w=2
    http://marc.info/?l=bugtraq&m=141383196021590&w=2
    http://marc.info/?l=bugtraq&m=141383244821813&w=2
    http://marc.info/?l=bugtraq&m=141383304022067&w=2
    http://marc.info/?l=bugtraq&m=141450491804793&w=2
    http://marc.info/?l=bugtraq&m=141576728022234&w=2
    http://marc.info/?l=bugtraq&m=141577137423233&w=2
    http://marc.info/?l=bugtraq&m=141577241923505&w=2
    http://marc.info/?l=bugtraq&m=141577297623641&w=2
    http://marc.info/?l=bugtraq&m=141585637922673&w=2
    http://marc.info/?l=bugtraq&m=141694386919794&w=2
    http://marc.info/?l=bugtraq&m=141879528318582&w=2
    http://marc.info/?l=bugtraq&m=142118135300698&w=2
    http://marc.info/?l=bugtraq&m=142289270617409&w=2
    http://marc.info/?l=bugtraq&m=142358026505815&w=2
    http://marc.info/?l=bugtraq&m=142358078406056&w=2
    http://marc.info/?l=bugtraq&m=142721162228379&w=2
    http://openwall.com/lists/oss-security/2014/09/25/32
    http://openwall.com/lists/oss-security/2014/09/26/2
    http://openwall.com/lists/oss-security/2014/09/28/10
    http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html
    http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html
    http://rhn.redhat.com/errata/RHSA-2014-1311.html
    http://rhn.redhat.com/errata/RHSA-2014-1312.html
    http://rhn.redhat.com/errata/RHSA-2014-1354.html
    http://seclists.org/fulldisclosure/2014/Oct/0
    http://secunia.com/advisories/58200
    http://secunia.com/advisories/59907
    http://secunia.com/advisories/60024
    http://secunia.com/advisories/60034
    http://secunia.com/advisories/60044
    http://secunia.com/advisories/60055
    http://secunia.com/advisories/60063
    http://secunia.com/advisories/60193
    http://secunia.com/advisories/60433
    http://secunia.com/advisories/61065
    http://secunia.com/advisories/61128
    http://secunia.com/advisories/61129
    http://secunia.com/advisories/61188
    http://secunia.com/advisories/61283
    http://secunia.com/advisories/61287
    http://secunia.com/advisories/61291
    http://secunia.com/advisories/61312
    http://secunia.com/advisories/61313
    http://secunia.com/advisories/61328
    http://secunia.com/advisories/61442
    http://secunia.com/advisories/61479
    http://secunia.com/advisories/61485
    http://secunia.com/advisories/61503
    http://secunia.com/advisories/61550
    http://secunia.com/advisories/61552
    http://secunia.com/advisories/61565
    http://secunia.com/advisories/61603
    http://secunia.com/advisories/61618
    http://secunia.com/advisories/61622
    http://secunia.com/advisories/61633
    http://secunia.com/advisories/61636
    http://secunia.com/advisories/61641
    http://secunia.com/advisories/61643
    http://secunia.com/advisories/61654
    http://secunia.com/advisories/61703
    http://secunia.com/advisories/61816
    http://secunia.com/advisories/61855
    http://secunia.com/advisories/61857
    http://secunia.com/advisories/61873
    http://secunia.com/advisories/62312
    http://secunia.com/advisories/62343
    http://support.apple.com/HT204244
    http://support.novell.com/security/cve/CVE-2014-7187.html
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915
    http://www-01.ibm.com/support/docview.wss?uid=swg21685604
    http://www-01.ibm.com/support/docview.wss?uid=swg21685733
    http://www-01.ibm.com/support/docview.wss?uid=swg21685749
    http://www-01.ibm.com/support/docview.wss?uid=swg21685914
    http://www-01.ibm.com/support/docview.wss?uid=swg21686084
    http://www-01.ibm.com/support/docview.wss?uid=swg21686131
    http://www-01.ibm.com/support/docview.wss?uid=swg21686246
    http://www-01.ibm.com/support/docview.wss?uid=swg21686445
    http://www-01.ibm.com/support/docview.wss?uid=swg21686447
    http://www-01.ibm.com/support/docview.wss?uid=swg21686479
    http://www-01.ibm.com/support/docview.wss?uid=swg21686494
    http://www-01.ibm.com/support/docview.wss?uid=swg21687079
    http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:164
    http://www.novell.com/support/kb/doc.php?id=7015721
    http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html
    http://www.qnap.com/i/en/support/con_show.php?cid=61
    http://www.securityfocus.com/archive/1/533593/100/0/threaded
    http://www.ubuntu.com/usn/USN-2364-1
    http://www.vmware.com/security/advisories/VMSA-2014-0010.html
    https://kb.bluecoat.com/index?page=content&id=SA82
    https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648
    https://kc.mcafee.com/corporate/index?page=content&id=SB10085
    https://support.apple.com/HT205267
    https://support.citrix.com/article/CTX200217
    https://support.citrix.com/article/CTX200223
    https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183
    https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts
    https://www.suse.com/support/shellshock/
    http://jvn.jp/en/jp/JVN55667175/index.html
    http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126
    http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
    http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html
    http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html
    http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
    http://marc.info/?l=bugtraq&m=141330468527613&w=2
    http://marc.info/?l=bugtraq&m=141345648114150&w=2
    http://marc.info/?l=bugtraq&m=141383026420882&w=2
    http://marc.info/?l=bugtraq&m=141383081521087&w=2
    http://marc.info/?l=bugtraq&m=141383138121313&w=2
    http://marc.info/?l=bugtraq&m=141383196021590&w=2
    http://marc.info/?l=bugtraq&m=141383244821813&w=2
    http://marc.info/?l=bugtraq&m=141383304022067&w=2
    http://marc.info/?l=bugtraq&m=141450491804793&w=2
    http://marc.info/?l=bugtraq&m=141576728022234&w=2
    http://marc.info/?l=bugtraq&m=141577137423233&w=2
    http://marc.info/?l=bugtraq&m=141577241923505&w=2
    http://marc.info/?l=bugtraq&m=141577297623641&w=2
    http://marc.info/?l=bugtraq&m=141585637922673&w=2
    http://marc.info/?l=bugtraq&m=141694386919794&w=2
    http://marc.info/?l=bugtraq&m=141879528318582&w=2
    http://marc.info/?l=bugtraq&m=142118135300698&w=2
    http://marc.info/?l=bugtraq&m=142289270617409&w=2
    http://marc.info/?l=bugtraq&m=142358026505815&w=2
    http://marc.info/?l=bugtraq&m=142358078406056&w=2
    http://marc.info/?l=bugtraq&m=142721162228379&w=2
    http://openwall.com/lists/oss-security/2014/09/25/32
    http://openwall.com/lists/oss-security/2014/09/26/2
    http://openwall.com/lists/oss-security/2014/09/28/10
    http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html
    http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html
    http://rhn.redhat.com/errata/RHSA-2014-1311.html
    http://rhn.redhat.com/errata/RHSA-2014-1312.html
    http://rhn.redhat.com/errata/RHSA-2014-1354.html
    http://seclists.org/fulldisclosure/2014/Oct/0
    http://secunia.com/advisories/58200
    http://secunia.com/advisories/59907
    http://secunia.com/advisories/60024
    http://secunia.com/advisories/60034
    http://secunia.com/advisories/60044
    http://secunia.com/advisories/60055
    http://secunia.com/advisories/60063
    http://secunia.com/advisories/60193
    http://secunia.com/advisories/60433
    http://secunia.com/advisories/61065
    http://secunia.com/advisories/61128
    http://secunia.com/advisories/61129
    http://secunia.com/advisories/61188
    http://secunia.com/advisories/61283
    http://secunia.com/advisories/61287
    http://secunia.com/advisories/61291
    http://secunia.com/advisories/61312
    http://secunia.com/advisories/61313
    http://secunia.com/advisories/61328
    http://secunia.com/advisories/61442
    http://secunia.com/advisories/61479
    http://secunia.com/advisories/61485
    http://secunia.com/advisories/61503
    http://secunia.com/advisories/61550
    http://secunia.com/advisories/61552
    http://secunia.com/advisories/61565
    http://secunia.com/advisories/61603
    http://secunia.com/advisories/61618
    http://secunia.com/advisories/61622
    http://secunia.com/advisories/61633
    http://secunia.com/advisories/61636
    http://secunia.com/advisories/61641
    http://secunia.com/advisories/61643
    http://secunia.com/advisories/61654
    http://secunia.com/advisories/61703
    http://secunia.com/advisories/61816
    http://secunia.com/advisories/61855
    http://secunia.com/advisories/61857
    http://secunia.com/advisories/61873
    http://secunia.com/advisories/62312
    http://secunia.com/advisories/62343
    http://support.apple.com/HT204244
    http://support.novell.com/security/cve/CVE-2014-7187.html
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915
    http://www-01.ibm.com/support/docview.wss?uid=swg21685604
    http://www-01.ibm.com/support/docview.wss?uid=swg21685733
    http://www-01.ibm.com/support/docview.wss?uid=swg21685749
    http://www-01.ibm.com/support/docview.wss?uid=swg21685914
    http://www-01.ibm.com/support/docview.wss?uid=swg21686084
    http://www-01.ibm.com/support/docview.wss?uid=swg21686131
    http://www-01.ibm.com/support/docview.wss?uid=swg21686246
    http://www-01.ibm.com/support/docview.wss?uid=swg21686445
    http://www-01.ibm.com/support/docview.wss?uid=swg21686447
    http://www-01.ibm.com/support/docview.wss?uid=swg21686479
    http://www-01.ibm.com/support/docview.wss?uid=swg21686494
    http://www-01.ibm.com/support/docview.wss?uid=swg21687079
    http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:164
    http://www.novell.com/support/kb/doc.php?id=7015721
    http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html
    http://www.qnap.com/i/en/support/con_show.php?cid=61
    http://www.securityfocus.com/archive/1/533593/100/0/threaded
    http://www.ubuntu.com/usn/USN-2364-1
    http://www.vmware.com/security/advisories/VMSA-2014-0010.html
    https://kb.bluecoat.com/index?page=content&id=SA82
    https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648
    https://kc.mcafee.com/corporate/index?page=content&id=SB10085
    https://support.apple.com/HT205267
    https://support.citrix.com/article/CTX200217
    https://support.citrix.com/article/CTX200223
    https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183
    https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts
    https://www.suse.com/support/shellshock/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High