CVE-2014-7187
NoneCVSS
—
EPSS
60.3%
Published
Sep 28, 2014
CISA due date
—
The record
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | bash | 0 | 4.3-9.2 |
| Debian:12 | bash | 0 | 4.3-9.2 |
| Debian:13 | bash | 0 | 4.3-9.2 |
| Debian:6.0 | bash | 0 | 4.1-3+deb6u2 |
| Debian:7 | bash | 0 | 4.2+dfsg-0.1+deb7u3 |
| Mageia:3 | bash | 0 | 4.2-50.2.mga3 |
| Mageia:4 | bash | 0 | 4.2-50.2.mga4 |
| Red Hat:enterprise_linux:5::client | bash | 0 | 0:3.2-33.el5_11.4 |
| Red Hat:enterprise_linux:5::client | bash-debuginfo | 0 | 0:3.2-33.el5_11.4 |
| Red Hat:enterprise_linux:5::server | bash | 0 | 0:3.2-33.el5_11.4 |
| Red Hat:enterprise_linux:5::server | bash-debuginfo | 0 | 0:3.2-33.el5_11.4 |
| Red Hat:enterprise_linux:6::client | bash | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::client | bash-debuginfo | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::client | bash-doc | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::computenode | bash | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::computenode | bash-debuginfo | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::computenode | bash-doc | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::server | bash | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::server | bash-debuginfo | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::server | bash-doc | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::workstation | bash | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::workstation | bash-debuginfo | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:6::workstation | bash-doc | 0 | 0:4.1.2-15.el6_5.2 |
| Red Hat:enterprise_linux:7::client | bash | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::client | bash-debuginfo | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::client | bash-doc | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::computenode | bash | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::computenode | bash-debuginfo | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::computenode | bash-doc | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::server | bash | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::server | bash-debuginfo | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::server | bash-doc | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::workstation | bash | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::workstation | bash-debuginfo | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:enterprise_linux:7::workstation | bash-doc | 0 | 0:4.2.45-5.el7_0.4 |
| Red Hat:rhel_els:4::as | bash | 0 | 0:3.0-27.el4.4 |
| Red Hat:rhel_els:4::as | bash-debuginfo | 0 | 0:3.0-27.el4.4 |
| Red Hat:rhel_els:4::es | bash | 0 | 0:3.0-27.el4.4 |
| Red Hat:rhel_els:4::es | bash-debuginfo | 0 | 0:3.0-27.el4.4 |
| Red Hat:rhel_eus:5.9 | bash | 0 | 0:3.2-32.el5_9.3 |
| Red Hat:rhel_eus:5.9 | bash-debuginfo | 0 | 0:3.2-32.el5_9.3 |
| Red Hat:rhel_eus:6.4::computenode | bash | 0 | 0:4.1.2-15.el6_4.2 |
| Red Hat:rhel_eus:6.4::computenode | bash-debuginfo | 0 | 0:4.1.2-15.el6_4.2 |
| Red Hat:rhel_eus:6.4::computenode | bash-doc | 0 | 0:4.1.2-15.el6_4.2 |
| Red Hat:rhel_eus:6.4::server | bash | 0 | 0:4.1.2-15.el6_4.2 |
| Red Hat:rhel_eus:6.4::server | bash-debuginfo | 0 | 0:4.1.2-15.el6_4.2 |
| Red Hat:rhel_eus:6.4::server | bash-doc | 0 | 0:4.1.2-15.el6_4.2 |
| Red Hat:rhel_mission_critical:5.6 | bash | 0 | 0:3.2-24.el5_6.2 |
| Red Hat:rhel_mission_critical:5.6 | bash-debuginfo | 0 | 0:3.2-24.el5_6.2 |
| Red Hat:rhel_mission_critical:6.2::server | bash | 0 | 0:4.1.2-9.el6_2.2 |
| Red Hat:rhel_mission_critical:6.2::server | bash-debuginfo | 0 | 0:4.1.2-9.el6_2.2 |
| Red Hat:rhel_mission_critical:6.2::server | bash-doc | 0 | 0:4.1.2-9.el6_2.2 |
| Red Hat:rhel_sjis:5 | bash | 0 | 0:3.2-33.el5_11.1.sjis.2 |
| Red Hat:rhel_sjis:5 | bash | 0 | 0:3.2-32.el5_9.3.sjis.1 |
| Red Hat:rhel_sjis:5 | bash-debuginfo | 0 | 0:3.2-33.el5_11.1.sjis.2 |
| Red Hat:rhel_sjis:5 | bash-debuginfo | 0 | 0:3.2-32.el5_9.3.sjis.1 |
| Red Hat:rhel_sjis:6 | bash | 0 | 0:4.1.2-15.el6_5.1.sjis.2 |
| Red Hat:rhel_sjis:6 | bash-debuginfo | 0 | 0:4.1.2-15.el6_5.1.sjis.2 |
| Red Hat:rhel_sjis:6 | bash-doc | 0 | 0:4.1.2-15.el6_5.1.sjis.2 |
| Red Hat:rhev_manager:3 | rhev-hypervisor6 | 0 | 0:6.5-20140930.1.el6ev |
| Ubuntu:14.04:LTS | bash | 0 | 4.3-7ubuntu1.4 |
| openSUSE:Tumbleweed | bash | 0 | 7.0-92.1 |
Related vulnerabilities
- CVE-2022-3715 A flaw was found in the bash package, where a heap-buffer overflow can occur in valid… Also affects bash
- CVE-2016-0634 The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users… Also affects bash
- CVE-2014-6278 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the… Also affects bash
- CVE-2014-7186 The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows… Also affects bash
- CVE-2014-6277 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the… Also affects bash
- CVE-2014-7169 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… Also affects bash
- CVE-2014-6271 GNU Bash through 4.3 processes trailing strings after function definitions in the values… Also affects bash
- CVE-2014-1568 Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x… Also affects rhev-hypervisor6