CVE-2014-7186: gnu bash

CVSS: 10.0v2.0HighModified

AliasesUBUNTU-CVE-2014-7186DEBIAN-CVE-2014-7186

Published 28-09-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-7186 is a high (CVSS 10.0) vulnerability in gnu bash. EPSS estimates a 64.34% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

64.34%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 10 · Related 2

DLA-63-1 DSA-3035-1 MGASA-2014-0394 OPENSUSE-SU-2024:10106-1 RHSA-2014:1306 RHSA-2014:1311+4 more

Timeline

28-09-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

64.34%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 64.34% on 18-09-2026

18-09-202618-10-2026

EPSS score

64.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
Maturity: weaponized
exploit-databaseremotelinuxUnverified
GNU bash 4.3.11 - Environment Variable dhclient
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Debian1 product

bash< 4.3-9.2

Gnu1 product

bash1.14.0 | 1.14.1 | 1.14.2 | 1.14.3 | 1.14.4 | 1.14.5 | 1.14.6 | 1.14.7 | 2.0 | 2.01 | 2.01.1 | 2.02 | 2.02.1 | 2.03 | 2.04 | 2.05 | 2.05:a | 2.05:b | 3.0 | 3.0.16 | 3.1 | 3.2 | 3.2.48 | 4.0 | 4.0:rc1 | 4.1 | 4.2 | 4.3

Ubuntu1 product

bash< 4.3-7ubuntu1.4

3 vendors · 3 products

References

130 links

packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlX Refsource MISC
www-01.ibm.com/support/docview.wss?uid=ssg1S1004897X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg21685749X Refsource CONFIRM
marc.info?l=bugtraq&m=141577137423233&w=2Vendor AdvisoryX Refsource HP
supportcenter.checkpoint.com/supportcenter/…X Refsource CONFIRM
marc.info?l=bugtraq&m=141383138121313&w=2Vendor AdvisoryX Refsource HP
marc.info?l=bugtraq&m=142721162228379&w=2Vendor AdvisoryX Refsource HP
www.securityfocus.com/archive/1/533593/100/0/threadedMailing ListX Refsource BUGTRAQ
marc.info?l=bugtraq&m=142358026505815&w=2Vendor AdvisoryX Refsource HP
lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.htmlVendor AdvisoryX Refsource SUSE

Show all 100 references

www-01.ibm.com/support/docview.wss?uid=swg21686084X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg21686479X Refsource CONFIRM
secunia.com/advisories/61188Third Party AdvisoryX Refsource SECUNIA
jvn.jp/en/jp/JVN55667175/index.htmlThird Party AdvisoryX Refsource JVN
lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/60433Third Party AdvisoryX Refsource SECUNIA
openwall.com/lists/oss-security/2014/09/25/32Mailing ListX Refsource MLISTExploit
marc.info?l=bugtraq&m=141383026420882&w=2Vendor AdvisoryX Refsource HP
marc.info?l=bugtraq&m=141585637922673&w=2Vendor AdvisoryX Refsource HP
marc.info?l=bugtraq&m=141576728022234&w=2Vendor AdvisoryX Refsource HP
www-01.ibm.com/support/docview.wss?uid=swg21685541X Refsource CONFIRM
www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.htmlX Refsource CONFIRM
secunia.com/advisories/61636Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/61816Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/61442Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=142358078406056&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61283Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=142113462216480&w=2Vendor AdvisoryX Refsource HP
lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor AdvisoryX Refsource APPLE
kc.mcafee.com/corporate/index?page=content&id=SB10085X Refsource CONFIRM
secunia.com/advisories/61654Third Party AdvisoryX Refsource SECUNIA
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315X Refsource CONFIRM
secunia.com/advisories/62312Third Party AdvisoryX Refsource SECUNIA
support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.htmlX Refsource CONFIRM
marc.info?l=bugtraq&m=141879528318582&w=2Vendor AdvisoryX Refsource HP
rhn.redhat.com/errata/RHSA-2014-1312.htmlVendor AdvisoryX Refsource REDHAT
www-01.ibm.com/support/docview.wss?uid=swg21685604X Refsource CONFIRM
marc.info?l=bugtraq&m=142118135300698&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61703Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2364-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/61065Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=141383196021590&w=2Vendor AdvisoryX Refsource HP
marc.info?l=bugtraq&m=141383081521087&w=2Vendor AdvisoryX Refsource HP
www-01.ibm.com/support/docview.wss?uid=swg21686445X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg21686131X Refsource CONFIRM
jvndb.jvn.jp/jvndb/JVNDB-2014-000126Third Party AdvisoryX Refsource JVNDB
secunia.com/advisories/61641Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.htmlVendor AdvisoryX Refsource SUSE
kb.juniper.net/InfoCenter/index?page=content&id=JSA10648X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=ssg1S1004898X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg21685914X Refsource CONFIRM
seclists.org/fulldisclosure/2014/Oct/0Mailing ListX Refsource FULLDISC
www.mandriva.com/security/advisories?name=MDVSA-2015:164Vendor AdvisoryX Refsource MANDRIVA
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075X Refsource CONFIRM
support.apple.com/HT205267X Refsource CONFIRM
secunia.com/advisories/60024Third Party AdvisoryX Refsource SECUNIA
packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlX Refsource MISC
secunia.com/advisories/61622Third Party AdvisoryX Refsource SECUNIA
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bashVendor AdvisoryX Refsource CISCO
support.novell.com/security/cve/CVE-2014-7186.htmlX Refsource CONFIRM
openwall.com/lists/oss-security/2014/09/28/10Mailing ListX Refsource MLIST
secunia.com/advisories/62343Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/61565Third Party AdvisoryX Refsource SECUNIA
www.suse.com/support/shellshock/X Refsource CONFIRM
support.apple.com/HT204244X Refsource CONFIRM
marc.info?l=bugtraq&m=141450491804793&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61313Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=142289270617409&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61873Third Party AdvisoryX Refsource SECUNIA
openwall.com/lists/oss-security/2014/09/26/2Mailing ListX Refsource MLIST
secunia.com/advisories/61485Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/61618Third Party AdvisoryX Refsource SECUNIA
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183X Refsource CONFIRM
marc.info?l=bugtraq&m=141577297623641&w=2Vendor AdvisoryX Refsource HP
www-01.ibm.com/support/docview.wss?uid=isg3T1021272X Refsource CONFIRM
marc.info?l=bugtraq&m=141383244821813&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61312Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/60193Third Party AdvisoryX Refsource SECUNIA
www.vmware.com/security/advisories/VMSA-2014-0010.htmlX Refsource CONFIRM
secunia.com/advisories/61479Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/60063Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/60034Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/59907Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/58200Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=141577241923505&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61643Third Party AdvisoryX Refsource SECUNIA
www.novell.com/support/kb/doc.php?id=7015721X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg21687079X Refsource CONFIRM
secunia.com/advisories/61503Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=swg21686246X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2014-1354.htmlVendor AdvisoryX Refsource REDHAT
www-01.ibm.com/support/docview.wss?uid=ssg1S1004915X Refsource CONFIRM
www.qnap.com/i/en/support/con_show.php?cid=61X Refsource CONFIRM
marc.info?l=bugtraq&m=141694386919794&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/61552Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/61780Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=isg3T1021279X Refsource CONFIRM
support.citrix.com/article/CTX200223X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg21686447X Refsource CONFIRM

Showing 100 of 130. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities