CVE Watch—

CVE-2014-7169

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

99.9%

p100

KEV

SIM

28 de jan. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

GNU / Bourne-Again Shell (Bash)

Vulnerabilidade

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Adicionado ao KEV

28 de jan. de 2022

Corrigir até

28 de jul. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2014-7169

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2014-6271—

100.0%

KEV—80GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability—