CVE-2014-6278: GNU Bash OS Command Injection Vulnerability

CVSS: 10.0v2.0HighKEVAnalyzed

AliasesUBUNTU-CVE-2014-6278DEBIAN-CVE-2014-6278

Published 30-09-2014Last modified 30-12-2025

Vulnerability summary

CVE-2014-6278 is a high (CVSS 10.0) OS Command Injection vulnerability in GNU GNU Bash. It is known to be exploited: CISA lists it, first on 02-10-2025. EPSS estimates a 99.68% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 8 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

99.68%

0%100%

Critical · +0.16 pp in 30 days

KEVListedCISA

RansomwareNone recordedNo known use recorded

Public exploits8exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 4 · Related 3

MGASA-2014-0394 OPENSUSE-SU-2024:10106-1 SUSE-SU-2016:2872-1 USN-2380-1

Timeline

30-09-2014
PublishedVulnerability first disclosed.
02-10-2025
Added to CISA KEVGNU Bash OS Command Injection Vulnerability
23-10-2025
CISA remediation dueApply mitigations per vendor instructions.
30-12-2025
Last modifiedVulnerability information updated.

Description

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.18.8v2.010.0

EPSS trend

Probability

99.68%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.16 pp

From 99.52% on 18-09-2026

18-09-202618-10-2026

EPSS score

99.68%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 02-10-2025
Federal due date: 23-10-2025

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. support.broadcom.com/web/… sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash www.ibm.com/support/… nvd.nist.gov/vuln/detail/CVE-2014-6278

Public exploits

8 found

exploit-databasecgiUnverified
Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Command Injection (Shellshock)
Maturity: poc
exploit-databaseremotehardwareUnverified
Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)
Maturity: poc
exploit-databaseremotelinuxVerified
Apache mod_cgi - 'Shellshock' Remote Command Injection
Maturity: weaponized

Show all 8 exploits

exploit-databaseremotelinuxVerified
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
Maturity: weaponized
exploit-databaseremotelinuxUnverified
GNU bash 4.3.11 - Environment Variable dhclient
Maturity: poc
MetasploitremoteUnverified
Apache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
auxiliary/scanner/http/apache_mod_cgi_bash_env
Maturity: poc
MetasploitremoteVerified
Apache mod_cgi Bash Environment Variable Code Injection (Shellshock)
exploit/multi/http/apache_mod_cgi_bash_env_exec
Maturity: weaponized
MetasploitremoteVerified
CUPS Filter Bash Environment Variable Code Injection (Shellshock)
exploit/multi/http/cups_bash_env_exec
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected systems

Debian1 product

bash< 4.3-9.2

Gnu1 product

bash1.14.0 | 1.14.1 | 1.14.2 | 1.14.3 | 1.14.4 | 1.14.5 | 1.14.6 | 1.14.7 | 2.0 | 2.01 | 2.01.1 | 2.02 | 2.02.1 | 2.03 | 2.04 | 2.05 | 2.05:a | 2.05:b | 3.0 | 3.0.16 | 3.1 | 3.2 | 3.2.48 | 4.0 | 4.0:rc1 | 4.1 | 4.2 | 4.3

Ubuntu1 product

bash< 4.3-7ubuntu1.5

3 vendors · 3 products

References

118 links

www-01.ibm.com/support/docview.wss?uid=ssg1S1004897X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685749X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141577137423233&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
supportcenter.checkpoint.com/supportcenter/…X Refsource CONFIRMThird Party Advisory
linux.oracle.com/errata/ELSA-2014-3093X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=142721162228379&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
marc.info?l=bugtraq&m=142358026505815&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686479X Refsource CONFIRMThird Party Advisory
jvn.jp/en/jp/JVN55667175/index.htmlThird Party AdvisoryX Refsource JVN
secunia.com/advisories/60433Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 100 references

marc.info?l=bugtraq&m=141383026420882&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
marc.info?l=bugtraq&m=141585637922673&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
packetstormsecurity.com/files/137344/Sun-Secure-Global-Desktop-Oracle-Global-Desktop-Shellshock.htmlX Refsource MISCThird Party Advisory
marc.info?l=bugtraq&m=141576728022234&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685541X Refsource CONFIRMThird Party Advisory
www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61816Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing List
secunia.com/advisories/61442Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=142358078406056&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61283Third Party AdvisoryX Refsource SECUNIABroken Link
kc.mcafee.com/corporate/index?page=content&id=SB10085X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61654Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-2380-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/62312Third Party AdvisoryX Refsource SECUNIABroken Link
support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141879528318582&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
security-tracker.debian.org/tracker/CVE-2014-6278X Refsource CONFIRMThird Party AdvisoryAdvisory
www-01.ibm.com/support/docview.wss?uid=swg21685604X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=142118135300698&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61703Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61065Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141383196021590&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
marc.info?l=bugtraq&m=141383081521087&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686445X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686131X Refsource CONFIRMThird Party Advisory
jvndb.jvn.jp/jvndb/JVNDB-2014-000126Third Party AdvisoryX Refsource JVNDB
secunia.com/advisories/61641Third Party AdvisoryX Refsource SECUNIABroken Link
www.exploit-db.com/exploits/39887/ExploitX Refsource EXPLOIT DBThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10648X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing List
www-01.ibm.com/support/docview.wss?uid=ssg1S1004898X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685914X Refsource CONFIRMThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2015:164Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/60325Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/60024Third Party AdvisoryX Refsource SECUNIABroken Link
packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlX Refsource MISCThird Party Advisory
lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.htmlX Refsource MISCThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bashVendor AdvisoryX Refsource CISCOThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1147414X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/62343Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/61565Third Party AdvisoryX Refsource SECUNIABroken Link
www.suse.com/support/shellshock/X Refsource CONFIRMVendor Advisory
marc.info?l=bugtraq&m=141450491804793&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61313Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61485Third Party AdvisoryX Refsource SECUNIABroken Link
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141577297623641&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=isg3T1021272X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383244821813&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61312Third Party AdvisoryX Refsource SECUNIABroken Link
linux.oracle.com/errata/ELSA-2014-3094X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/60193Third Party AdvisoryX Refsource SECUNIABroken Link
www.vmware.com/security/advisories/VMSA-2014-0010.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/60063Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/60034Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/59907Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/58200Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141577241923505&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61643Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/support/kb/doc.php?id=7015721X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21687079X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61503Third Party AdvisoryX Refsource SECUNIABroken Link
www-01.ibm.com/support/docview.wss?uid=swg21686246X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=ssg1S1004915X Refsource CONFIRMThird Party Advisory
support.novell.com/security/cve/CVE-2014-6278.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383465822787&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www.qnap.com/i/en/support/con_show.php?cid=61X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61552Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61780Third Party AdvisoryX Refsource SECUNIABroken Link
www-01.ibm.com/support/docview.wss?uid=isg3T1021279X Refsource CONFIRMThird Party Advisory
support.citrix.com/article/CTX200223X Refsource CONFIRMThird Party Advisory
www.exploit-db.com/exploits/39568/ExploitX Refsource EXPLOIT DBThird Party Advisory
marc.info?l=bugtraq&m=141330468527613&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/60044Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61291Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141345648114150&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61287Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141383353622268&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=isg3T1021361X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383304022067&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/61128Third Party AdvisoryX Refsource SECUNIABroken Link
support.citrix.com/article/CTX200217X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61471Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/60055Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/59961Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61550Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61633Third Party AdvisoryX Refsource SECUNIABroken Link

Showing 100 of 118. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities