Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2014-7169

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

Published
Last modified
published
Listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

GNU Bash through version 4.3 is affected, and it can be triggered through software that passes environment variables across a privilege boundary, such as OpenSSH's ForceCommand feature, Apache HTTP Server's mod_cgi and mod_cgid modules, and DHCP client scripts. A remote attacker could use a specially crafted environment to write to files or potentially cause other unspecified effects.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 25

packetstormsecurity.com

www-01.ibm.com

openwall.com

marc.info

supportcenter.checkpoint.com

securityfocus.com

lists.opensuse.org

secunia.com

jvn.jp

rhn.redhat.com