CVE-2014-7169 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possi...
CriticalCVSS 9.8
EPSS 99.9%
CISA KEV
added 2022-01-28 · due 2022-07-28
Exploited in the wild
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
CISA Known Exploited Vulnerability
- Date added
- 2022-01-28
- Due date (FCEB)
- 2022-07-28
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bash(Debian:12) | < 4.3-9.2 | 4.3-9.2 |
| debian/bash(Debian:13) | < 4.3-9.2 | 4.3-9.2 |
| debian/bash(Debian:14) | < 4.3-9.2 | 4.3-9.2 |
| GNU bash | <= 4.3 | No fix listed |
| arista eos | >= 4.9.0, < 4.9.12 | 4.9.12 |
| arista eos | >= 4.10.0, < 4.10.9 | 4.10.9 |
| arista eos | >= 4.11.0, < 4.11.11 | 4.11.11 |
| arista eos | >= 4.12.0, < 4.12.9 | 4.12.9 |
| arista eos | >= 4.13.0, < 4.13.9 | 4.13.9 |
| arista eos | >= 4.14.0, < 4.14.4f | 4.14.4f |
| oracle linux | = 4 | No fix listed |
| oracle linux | = 5 | No fix listed |
| oracle linux | = 6 | No fix listed |
| qnap qts | < 4.1.1 | 4.1.1 |
| qnap qts | = 4.1.1 | No fix listed |
| qnap qts | = 4.1.1-build_0927 | No fix listed |
| mageia | = 3.0 | No fix listed |
| mageia | = 4.0 | No fix listed |
| redhat gluster storage server for on-premise | = 2.1 | No fix listed |
| redhat virtualization | = 3.4 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 5.9 | No fix listed |
| redhat enterprise linux eus | = 6.4 | No fix listed |
| redhat enterprise linux eus | = 6.5 | No fix listed |
| redhat enterprise linux eus | = 7.3 | No fix listed |
| redhat enterprise linux eus | = 7.4 | No fix listed |
| redhat enterprise linux eus | = 7.5 | No fix listed |
| redhat enterprise linux eus | = 7.6 | No fix listed |
| redhat enterprise linux eus | = 7.7 | No fix listed |
| redhat enterprise linux for ibm z systems | = 5.9_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 6.4_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 6.5_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.3_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.4_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.5_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.6_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.7_s390x | No fix listed |
| redhat enterprise linux for power big endian | = 5.0_ppc | No fix listed |
| redhat enterprise linux for power big endian | = 5.9_ppc | No fix listed |
| redhat enterprise linux for power big endian | = 6.0_ppc64 | No fix listed |
| redhat enterprise linux for power big endian | = 6.4_ppc64 | No fix listed |
| redhat enterprise linux for power big endian | = 7.0_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 6.5_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.3_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.4_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.5_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.6_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.7_ppc64 | No fix listed |
| redhat enterprise linux for scientific computing | = 6.0 | No fix listed |
| redhat enterprise linux for scientific computing | = 7.0 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 5.6 | No fix listed |
| redhat enterprise linux server aus | = 5.9 | No fix listed |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| redhat enterprise linux server aus | = 6.4 | No fix listed |
| redhat enterprise linux server aus | = 6.5 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server aus | = 7.7 | No fix listed |
| redhat enterprise linux server from rhui | = 5.0 | No fix listed |
| redhat enterprise linux server from rhui | = 6.0 | No fix listed |
| redhat enterprise linux server from rhui | = 7.0 | No fix listed |
| redhat enterprise linux server tus | = 6.5 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.7 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| SUSE studio onsite | = 1.3 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise server | = 10-sp3 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp1 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| ibm infosphere guardium database activity monitoring | = 8.2 | No fix listed |
| ibm infosphere guardium database activity monitoring | = 9.0 | No fix listed |
| ibm infosphere guardium database activity monitoring | = 9.1 | No fix listed |
| ibm pureapplication system | >= 1.0.0.0, <= 1.0.0.4 | No fix listed |
| ibm pureapplication system | >= 1.1.0.0, <= 1.1.0.4 | No fix listed |
| ibm pureapplication system | = 2.0.0.0 | No fix listed |
| ibm qradar risk manager | = 7.1.0 | No fix listed |
| ibm qradar security information and event manager | = 7.1.0 | No fix listed |
| ibm qradar security information and event manager | = 7.1.0-mr1 | No fix listed |
| ibm qradar security information and event manager | = 7.1.0-mr2 | No fix listed |
| ibm qradar security information and event manager | = 7.1.1 | No fix listed |
| ibm qradar security information and event manager | = 7.1.1-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.1.1-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.1.1-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p10 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p11 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p12 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p13 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p5 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p6 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p7 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p8 | No fix listed |
| ibm qradar security information and event manager | = 7.1.2-p9 | No fix listed |
| ibm qradar security information and event manager | = 7.2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.0 | No fix listed |
| ibm qradar security information and event manager | = 7.2.0-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.0-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.0-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.1-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.1-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.1-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.2-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.2-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.2-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.2-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.3-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.3-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.3-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.3-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4-p5 | No fix listed |
| ibm qradar security information and event manager | = 7.2.4-p6 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5-p5 | No fix listed |
| ibm qradar security information and event manager | = 7.2.5-p6 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p5 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p6 | No fix listed |
| ibm qradar security information and event manager | = 7.2.6-p7 | No fix listed |
| ibm qradar security information and event manager | = 7.2.7 | No fix listed |
| ibm qradar security information and event manager | = 7.2.7-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.7-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.7-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.7-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p1 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p10 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p11 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p12 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p13 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p14 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p15 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p16 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p2 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p3 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p4 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p5 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p6 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p7 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p8 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8-p9 | No fix listed |
| ibm qradar security information and event manager | = 7.2.8.15 | No fix listed |
| ibm qradar security information and event manager | = 7.2.9 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.0 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.1 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.2 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.3 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.4 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p1 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p2 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p3 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p4 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p5 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p6 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.6-p7 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.8 | No fix listed |
| ibm qradar vulnerability manager | = 7.2.8-p1 | No fix listed |
References
- Debian Security Tracker CVE-2014-7169 vendor-advisory
- bugs.debian.org issue-tracking
- advisories.mageia.org third-party-advisory
- APPLE-SA-2014-10-16-1 broken-link vendor-advisory
- JVN#55667175 third-party-advisory
- JVNDB-2014-000126 third-party-advisory vdb-entry
- lcamtuf.blogspot.com third-party-advisory
- linux.oracle.com third-party-advisory
- linux.oracle.com third-party-advisory
- linux.oracle.com third-party-advisory
- linux.oracle.com third-party-advisory
- openSUSE-SU-2014:1229 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:1242 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:1247 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:1254 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:1259 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:1287 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:1308 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:1310 mailing-list third-party-advisory vendor-advisory
- HPSBGN03117 mailing-list vendor-advisory
- HPSBHF03119 mailing-list vendor-advisory
- HPSBHF03124 mailing-list vendor-advisory
- HPSBST03122 mailing-list vendor-advisory
- HPSBMU03133 mailing-list vendor-advisory
- HPSBGN03138 mailing-list vendor-advisory
- HPSBHF03125 mailing-list vendor-advisory
- HPSBMU03143 mailing-list vendor-advisory
- HPSBMU03144 mailing-list vendor-advisory
- HPSBST03131 mailing-list vendor-advisory
- HPSBST03129 mailing-list vendor-advisory
- HPSBGN03142 mailing-list vendor-advisory
- HPSBGN03141 mailing-list vendor-advisory
- HPSBHF03146 mailing-list vendor-advisory
- HPSBHF03145 mailing-list vendor-advisory
- HPSBST03157 mailing-list vendor-advisory
- HPSBST03155 mailing-list vendor-advisory
- HPSBMU03165 mailing-list vendor-advisory
- HPSBST03181 mailing-list vendor-advisory
- HPSBST03154 mailing-list vendor-advisory
- HPSBMU03182 mailing-list vendor-advisory
- HPSBST03148 mailing-list vendor-advisory
- HPSBMU03217 mailing-list vendor-advisory
- SSRT101711 mailing-list vendor-advisory
- SSRT101868 mailing-list vendor-advisory
- HPSBMU03245 mailing-list vendor-advisory
- HPSBMU03246 mailing-list vendor-advisory
- SSRT101819 mailing-list vendor-advisory
- HPSBST03195 mailing-list vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- RHSA-2014:1306 third-party-advisory vendor-advisory
- RHSA-2014:1311 third-party-advisory vendor-advisory
- RHSA-2014:1312 third-party-advisory vendor-advisory
- RHSA-2014:1354 third-party-advisory vendor-advisory
- 20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities mailing-list third-party-advisory
- 58200 broken-link third-party-advisory
- 59272 broken-link third-party-advisory
- 59737 broken-link third-party-advisory
- 59907 broken-link third-party-advisory
- 60024 broken-link third-party-advisory
- 60034 broken-link third-party-advisory
- 60044 broken-link third-party-advisory
- 60055 broken-link third-party-advisory
- 60063 broken-link third-party-advisory
- 60193 broken-link third-party-advisory
- 60325 broken-link third-party-advisory
- 60433 broken-link third-party-advisory
- 60947 broken-link third-party-advisory
- 61065 broken-link third-party-advisory
- 61128 broken-link third-party-advisory
- 61129 broken-link third-party-advisory
- 61188 broken-link third-party-advisory
- 61283 broken-link third-party-advisory
- 61287 broken-link third-party-advisory
- 61291 broken-link third-party-advisory
- 61312 broken-link third-party-advisory
- 61313 broken-link third-party-advisory
- 61328 broken-link third-party-advisory
- 61442 broken-link third-party-advisory
- 61471 broken-link third-party-advisory
- 61479 broken-link third-party-advisory
- 61485 broken-link third-party-advisory
- 61503 broken-link third-party-advisory
- 61550 broken-link third-party-advisory
- 61552 broken-link third-party-advisory
- 61565 broken-link third-party-advisory
- 61603 broken-link third-party-advisory
- 61618 broken-link third-party-advisory
- 61619 broken-link third-party-advisory
- 61622 broken-link third-party-advisory
- 61626 broken-link third-party-advisory
- 61633 broken-link third-party-advisory
- 61641 broken-link third-party-advisory
- 61643 broken-link third-party-advisory
- 61654 broken-link third-party-advisory
- 61676 broken-link third-party-advisory
- 61700 broken-link third-party-advisory
- 61703 broken-link third-party-advisory
- 61711 broken-link third-party-advisory
- 61715 broken-link third-party-advisory