CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Published Sep 24, 2014 · updated Jun 16, 2026 · gnu bash
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
Timeline
Detection, updates, and resolution for this record.
Sep 24, 2014 · Catalog
Detected
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situati
Jan 28, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jul 28, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situati
Required action
Apply updates per vendor instructions.
CISA due date Jul 28, 2022
Affected
- cpe arista/eosversion unspecified
- cpe gnu/bashversion unspecified
- cpe mageia/mageia3.0
- cpe oracle/linux4
- cpe qnap/qtsversion unspecified
- cpe redhat/gluster storage server for on-premise2.1
- cpe suse/studio onsite1.3
- vendor GNU Bourne-Again Shell (Bash)version unspecified
Sources
- CISA KEVCVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
cisa.gov - CVE.orgCVE-2014-6271
Official CVE identifier
cve.org - FIRST EPSSCVE-2014-6271
30-day exploitation probability 100.0%
first.org - Exploit Database34777
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database38849
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database39918
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesauxiliary_scanner/http/apache_mod_cgi_bash_env
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesauxiliary_server/dhclient_bash_env
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesexploit_linux/http/advantech_switch_bash_env_exec
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the
nvd.nist.gov