CVE-2014-7169

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2014-7169

Remediation deadline: July 28, 2022

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Timeline

Published:January 28th, 2022 12:00 AM

Last modified:January 28th, 2022 12:00 AM

Added to KEV:January 28th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

GNU

Products

Bourne-Again Shell (Bash)

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute