Log in / Sign up

Vulnerability details

CVE-2014-7169

Actively exploited
GNU Bourne-Again Shell (Bash)
CVSS 3.1
9.8Critical

Official description

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.

CVSS scores

ScoreVersionSourceVector
9.8Critical 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
No product information recorded.

References and advisories

161
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2014-09-25
Last updated
2025-10-22
State
Published
Assigner (CNA)
mitre

CISA KEV catalog

Date added
2022-01-28
Due date
2022-07-28
Used in ransomware
Unknown

Exploit prediction (EPSS)

99.94%
Probability of exploitation in 30 days
99.9%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
Active
Technical impact
Total

Weaknesses (CWE)

  • CWE-78
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')