gnu bash vulnerabilities (CVE)

CVE records published for gnu bash, newest first. Follow to get an email when a new one appears.

3 results
8.8High
CVE-2014-6278 KEV

GNU Bash OS Command Injection Vulnerability

gnu bash

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand f…

100%EPSS
9.8Critical
CVE-2014-7169 KEV

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as…

100%EPSS
9.8Critical
CVE-2014-6271 KEV

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature…

100%EPSS