CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVSS: 10.0v2.0HighKEVAnalyzed

AliasesMGASA-2014-0393UBUNTU-CVE-2014-7169USN-2363-1+2 more

Published 25-09-2014Last modified 22-10-2025

Vulnerability summary

CVE-2014-7169 is a high (CVSS 10.0) OS Command Injection vulnerability in GNU Bourne-Again Shell (Bash). It is known to be exploited: CISA lists it, first on 28-01-2022. EPSS estimates a 99.94% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 17 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

99.94%

0%100%

Critical · 0.00 pp in 30 days

KEVListedCISA

RansomwareNone recordedNo known use recorded

Public exploits17reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 8 · Duplicates 2 · Related 1

DLA-63-1 DSA-3035-1 OPENSUSE-SU-2024:10106-1 RHSA-2014:1306 RHSA-2014:1311 RHSA-2014:1312+4 more

Timeline

25-09-2014
PublishedVulnerability first disclosed.
28-01-2022
Added to CISA KEVGNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
28-07-2022
CISA remediation dueApply updates per vendor instructions.
22-10-2025
Last modifiedVulnerability information updated.

Description

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.19.8v2.010.0

EPSS trend

Probability

99.94%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 99.94% on 18-09-2026

18-09-202618-10-2026

EPSS score

99.94%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 28-01-2022
Federal due date: 28-07-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2014-7169

Public exploits

17 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databaseremotecgiVerified
GNU Bash - Environment Variable Command Injection (Metasploit)
Maturity: weaponized

Show all 17 exploits

exploit-databasecgiVerified
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
Maturity: poc
exploit-databasecgiVerified
IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection
Maturity: poc
exploit-databaseremotehardwareUnverified
QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)
Maturity: poc
exploit-databaseremotehardwareUnverified
QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
Maturity: poc
exploit-databaseremotelinuxVerified
Bash - 'Shellshock' Environment Variables Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
Maturity: weaponized
exploit-databaseremotelinuxVerified
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
Maturity: weaponized
exploit-databaseremotelinuxVerified
GNU Bash - 'Shellshock' Environment Variable Command Injection
Maturity: weaponized
exploit-databaseremotelinuxUnverified
GNU bash 4.3.11 - Environment Variable dhclient
Maturity: poc
exploit-databaseremotelinuxUnverified
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Maturity: poc
exploit-databaseremotelinuxVerified
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
Maturity: weaponized
exploit-databasemultipleUnverified
Kemp Load Master 7.1.16 - Multiple Vulnerabilities
Maturity: poc
exploit-databasephpUnverified
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
Maturity: poc

Weaknesses

CWE · root cause

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected systems

Ibm22 products

flex_system_v7000_firmware≥ 1.1.0.0, < 7.1.0.11 | ≥ 7.2.0.0, < 7.2.0.9 | ≥ 7.3.0.0, < 7.3.0.7
infosphere_guardium_database_activity_monitoring8.2 | 9.0 | 9.1
pureapplication_system≥ 1.0.0.0, ≤ 1.0.0.4 | ≥ 1.1.0.0, ≤ 1.1.0.4 | 2.0.0.0
qradar_risk_manager7.1.0
qradar_security_information_and_event_manager7.1.0 | 7.1.0:mr1 | 7.1.0:mr2 | 7.1.1 | 7.1.1:p1 | 7.1.1:p2 | 7.1.1:p3 | 7.1.2 | 7.1.2:p1 | 7.1.2:p10 | 7.1.2:p11 | 7.1.2:p12 | 7.1.2:p13 | 7.1.2:p2 | 7.1.2:p3 | 7.1.2:p4 | 7.1.2:p5 | 7.1.2:p6 | 7.1.2:p7 | 7.1.2:p8 | 7.1.2:p9 | 7.2 | 7.2.0 | 7.2.0:p1 | 7.2.0:p2 | 7.2.0:p3 | 7.2.1 | 7.2.1:p1 | 7.2.1:p2 | 7.2.1:p3 | 7.2.2 | 7.2.2:p1 | 7.2.2:p2 | 7.2.2:p3 | 7.2.2:p4 | 7.2.3 | 7.2.3:p1 | 7.2.3:p2 | 7.2.3:p3 | 7.2.3:p4 | 7.2.4 | 7.2.4:p1 | 7.2.4:p2 | 7.2.4:p3 | 7.2.4:p4 | 7.2.4:p5 | 7.2.4:p6 | 7.2.5 | 7.2.5:p1 | 7.2.5:p2 | 7.2.5:p3 | 7.2.5:p4 | 7.2.5:p5 | 7.2.5:p6 | 7.2.6 | 7.2.6:p1 | 7.2.6:p2 | 7.2.6:p3 | 7.2.6:p4 | 7.2.6:p5 | 7.2.6:p6 | 7.2.6:p7 | 7.2.7 | 7.2.7:p1 | 7.2.7:p2 | 7.2.7:p3 | 7.2.7:p4 | 7.2.8 | 7.2.8:p1 | 7.2.8:p10 | 7.2.8:p11 | 7.2.8:p12 | 7.2.8:p13 | 7.2.8:p14 | 7.2.8:p15 | 7.2.8:p16 | 7.2.8:p2 | 7.2.8:p3 | 7.2.8:p4 | 7.2.8:p5 | 7.2.8:p6 | 7.2.8:p7 | 7.2.8:p8 | 7.2.8:p9 | 7.2.8.15 | 7.2.9

Show all 22

F519 products

arx≥ 6.0.0, ≤ 6.4.0
big-ip_access_policy_manager≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.5.1 | 11.6.0
big-ip_advanced_firewall_manager≥ 11.3.0, ≤ 11.5.1 | 11.6.0
big-ip_analytics≥ 11.0.0, ≤ 11.5.1 | 11.6.0
big-ip_application_acceleration_manager≥ 11.4.0, ≤ 11.5.1 | 11.6.0

Show all 19

Redhat14 products

enterprise_linuxEOL4.0 | 5.0 | 6.0 | 7.0
enterprise_linux_desktop5.0 | 6.0 | 7.0
enterprise_linux_eus5.9 | 6.4 | 6.5 | 7.3 | 7.4 | 7.5 | 7.6 | 7.7
enterprise_linux_for_ibm_z_systems5.9_s390x | 6.4_s390x | 6.5_s390x | 7.3_s390x | 7.4_s390x | 7.5_s390x | 7.6_s390x | 7.7_s390x
enterprise_linux_for_power_big_endian5.0_ppc | 5.9_ppc | 6.0_ppc64 | 6.4_ppc64 | 7.0_ppc64

Show all 14

Suse4 products

linux_enterprise_desktop11:sp3 | 12
linux_enterprise_server10:sp3 | 10:sp4 | 11:sp1 | 11:sp2 | 11:sp3 | 12
linux_enterprise_software_development_kit11:sp3 | 12
studio_onsite1.3

Mageia3 products

bash< 4.2-49.1.mga3
bash< 4.2-49.1.mga4
mageiaEOL3.0 | 4.0

Debian2 products

bash< 4.3-9.2
debian_linuxEOL7.0

Novell2 products

open_enterprise_server2.0:sp3 | 11.0:sp2
zenworks_configuration_management10.3 | 11 | 11.1 | 11.2 | 11.3.0

Vmware2 products

esx4.0 | 4.1
vcenter_server_appliance5.0 | 5.0:update_1 | 5.0:update_2 | 5.1 | 5.1:update_1 | 5.1:update_2 | 5.5 | 5.5:update_1

Apple1 product

mac_os_x≥ 10.0.0, < 10.10.0

Arista1 product

eos≥ 4.9.0, < 4.9.12 | ≥ 4.10.0, < 4.10.9 | ≥ 4.11.0, < 4.11.11 | ≥ 4.12.0, < 4.12.9 | ≥ 4.13.0, < 4.13.9 | ≥ 4.14.0, < 4.14.4f

Canonical1 product

ubuntu_linuxEOL10.04 | 12.04 | 14.04

Checkpoint1 product

security_gateway< r77.30

Citrix1 product

netscaler_sdx_firmware< 9.3.67.5r1 | ≥ 10, < 10.1.129.11r1 | ≥ 10.5, < 10.5.52.11r1

Gnu1 product

bash≤ 4.3

Opensuse1 product

opensuseEOL12.3 | 13.1 | 13.2

Oracle1 product

linuxEOL4 | 5 | 6

Qnap1 product

qts< 4.1.1 | 4.1.1 | 4.1.1:build_0927

Ubuntu1 product

bash< 4.3-7ubuntu1.2 | < 4.3-7ubuntu1.3

18 vendors · 78 products

References

172 links

packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www-01.ibm.com/support/docview.wss?uid=ssg1S1004897X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685749X Refsource CONFIRMThird Party Advisory
www.openwall.com/lists/oss-security/2014/09/24/32Mailing ListX Refsource MLIST
marc.info?l=bugtraq&m=141577137423233&w=2Vendor AdvisoryX Refsource HPMailing List
marc.info?l=bugtraq&m=141216668515282&w=2Vendor AdvisoryX Refsource HPMailing List
supportcenter.checkpoint.com/supportcenter/…X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383138121313&w=2Vendor AdvisoryX Refsource HPMailing List
marc.info?l=bugtraq&m=142721162228379&w=2Vendor AdvisoryX Refsource HPMailing List
www.securityfocus.com/archive/1/533593/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry

Show all 100 references

marc.info?l=bugtraq&m=142358026505815&w=2Vendor AdvisoryX Refsource HPMailing List
lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686084X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686479X Refsource CONFIRMBroken Link
secunia.com/advisories/61188Third Party AdvisoryX Refsource SECUNIABroken Link
jvn.jp/en/jp/JVN55667175/index.htmlThird Party AdvisoryX Refsource JVN
secunia.com/advisories/61676Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/60433Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141383026420882&w=2Vendor AdvisoryX Refsource HPMailing List
marc.info?l=bugtraq&m=141585637922673&w=2Vendor AdvisoryX Refsource HPMailing List
rhn.redhat.com/errata/RHSA-2014-1306.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
marc.info?l=bugtraq&m=141576728022234&w=2Vendor AdvisoryX Refsource HPMailing List
www-01.ibm.com/support/docview.wss?uid=swg21685541X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61715Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-2363-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.htmlX Refsource CONFIRMPatchThird Party Advisory
secunia.com/advisories/61816Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/61442Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=142358078406056&w=2Vendor AdvisoryX Refsource HPMailing List
marc.info?l=bugtraq&m=142805027510172&w=2Vendor AdvisoryX Refsource HPMailing List
secunia.com/advisories/61283Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=142113462216480&w=2Vendor AdvisoryX Refsource HPMailing List
kc.mcafee.com/corporate/index?page=content&id=SB10085X Refsource CONFIRMBroken Link
lists.opensuse.org/opensuse-updates/2014-10/msg00023.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/61654Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/support/kb/doc.php?id=7015701X Refsource CONFIRMThird Party Advisory
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315X Refsource CONFIRMBroken Link
secunia.com/advisories/62312Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/59272Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141319209015420&w=2Vendor AdvisoryX Refsource HPMailing List
support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141879528318582&w=2Vendor AdvisoryX Refsource HPMailing List
rhn.redhat.com/errata/RHSA-2014-1312.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685604X Refsource CONFIRMThird Party Advisory
www.ubuntu.com/usn/USN-2363-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
marc.info?l=bugtraq&m=142118135300698&w=2Vendor AdvisoryX Refsource HPMailing List
secunia.com/advisories/61703Third Party AdvisoryX Refsource SECUNIABroken Link
support.apple.com/kb/HT6495X Refsource CONFIRMThird Party Advisory
www.kb.cert.org/vuls/id/252743Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/61065Third Party AdvisoryX Refsource SECUNIABroken Link
linux.oracle.com/errata/ELSA-2014-3075.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383196021590&w=2Vendor AdvisoryX Refsource HPMailing List
marc.info?l=bugtraq&m=141383081521087&w=2Vendor AdvisoryX Refsource HPMailing List
www-01.ibm.com/support/docview.wss?uid=swg21686445X Refsource CONFIRMThird Party Advisory
support.novell.com/security/cve/CVE-2014-7169.htmlX Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686131X Refsource CONFIRMThird Party Advisory
jvndb.jvn.jp/jvndb/JVNDB-2014-000126Third Party AdvisoryX Refsource JVNDBVDB Entry
www.us-cert.gov/ncas/alerts/TA14-268AThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/61641Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10648X Refsource CONFIRMThird Party Advisory
access.redhat.com/node/1200223X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=ssg1S1004898X Refsource CONFIRMThird Party Advisory
archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlVendor AdvisoryX Refsource APPLEBroken Link
www-01.ibm.com/support/docview.wss?uid=swg21685914X Refsource CONFIRMBroken Link
seclists.org/fulldisclosure/2014/Oct/0Mailing ListX Refsource FULLDISCThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2015:164Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/61619Third Party AdvisoryX Refsource SECUNIABroken Link
linux.oracle.com/errata/ELSA-2014-3078.htmlX Refsource CONFIRMThird Party Advisory
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075X Refsource CONFIRMBroken Link
secunia.com/advisories/60325Third Party AdvisoryX Refsource SECUNIABroken Link
help.ecostruxureit.com/display/…X Refsource CONFIRMBroken Link
secunia.com/advisories/60024Third Party AdvisoryX Refsource SECUNIABroken Link
packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/34879/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
secunia.com/advisories/61622Third Party AdvisoryX Refsource SECUNIABroken Link
access.redhat.com/articles/1200223X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/62343Third Party AdvisoryX Refsource SECUNIABroken Link
advisories.mageia.org/MGASA-2014-0393.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61565Third Party AdvisoryX Refsource SECUNIABroken Link
www.suse.com/support/shellshock/X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141450491804793&w=2Vendor AdvisoryX Refsource HPMailing List
secunia.com/advisories/61313Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61873Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61485Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/61618Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/60947Third Party AdvisoryX Refsource SECUNIABroken Link
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183X Refsource CONFIRMBroken Link
support.apple.com/kb/HT6535X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141577297623641&w=2Vendor AdvisoryX Refsource HPMailing List
www-01.ibm.com/support/docview.wss?uid=isg3T1021272X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383244821813&w=2Vendor AdvisoryX Refsource HPMailing List
secunia.com/advisories/61312Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/60193Third Party AdvisoryX Refsource SECUNIABroken Link
www.vmware.com/security/advisories/VMSA-2014-0010.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61479Third Party AdvisoryX Refsource SECUNIABroken Link

Showing 100 of 172. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities