ZeroDay Findings
Sign inSign up

Findings

CVE-2014-7169

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Published Sep 24, 2014 · updated Jun 16, 2026 · gnu bash

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 24, 2014 · Catalog

    Detected

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scri

  2. Jan 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jul 28, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scri

Required action

Apply updates per vendor instructions.

CISA due date Jul 28, 2022

Affected

  • cpe arista/eosversion unspecified
  • cpe gnu/bashversion unspecified
  • cpe mageia/mageia3.0
  • cpe oracle/linux4
  • cpe qnap/qtsversion unspecified
  • cpe redhat/gluster storage server for on-premise2.1
  • cpe suse/studio onsite1.3
  • vendor GNU Bourne-Again Shell (Bash)version unspecified

Sources

  • CISA KEVCVE-2014-7169

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

    cisa.gov
  • CVE.orgCVE-2014-7169

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2014-7169

    30-day exploitation probability 99.9%

    first.org
  • Exploit Database34777

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database34839

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database34895

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2014-7169

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vect

    nvd.nist.gov

References